pypi package report

Is colpali-engine safe?

No known vulnerabilities recorded against this package.

// reach

22 direct dependencies

8 carry known advisories, worst CRITICAL

numpyCRITICAL
pillowCRITICAL
scipy
torch
transformers
requests

4 packages depend on it

an advisory here reaches each of them

cocoindex
lancedb
late-interaction-kernels
mteb

Create a free accountfor every dependency path, dependent and what to upgrade

// ai models

4 published models

1 declared · 4 observed · 0 inferred

Model	Evidence
athrael-soju/colqwen3.5-4.5B-v3	observed
tencent/EVIE-4.5B	observed
tencent/EVIE-8B	observed
vidore/colqwen2-v1.0	observed

Create a free accountto see all 2 models and per-model risk

4 published AI models are associated with this package: 1 name it in a requirements or pyproject file, 4 load it or import it directly, and 0 are inferred from the runtime stack their declared library pulls in. Only 1 state a version requirement, so this is not a count of affected models.

Checked 2026-09-22 at 22:12 UTC. Updated continuously from NVD, GHSA, OSV and CNA feeds.