3 ms·
You should know that there is already a solution for this, SafeTensors [0]. But it may be a nice tool for those who download "unsafe" models [0]: https://hugg
by lucrbvi 9mo ago
You should know that there is already a solution for this, SafeTensors [0].
But it may be a nice tool for those who download "unsafe" models
[0]: https://huggingface.co/docs/safetensors/index https://huggingface.co/docs/safetensors/index
- embedding-shape 9mo agoIt seems like this project has decided that .safetensors might not be so safe after all, since it's scanning them too, according to https://drive.google.com/drive/folders/1G-Bq063zk8szx9fAQ3NNnNFnRjJEt6KG https://drive.google.com/drive/folders/1G-Bq063zk8szx9fAQ3NN... at least.
- arseniibr 9mo agoSafetensors is the goal, but legacy models are still there. A massive portion of the ecosystem (especially older fine-tunes and specialized architectures) is still stuck on Pickle/PyTorch .bin. Until 100% of models migrate, we need tooling to audit the "unsafe" ones.