Hugging Face
Models
Datasets
Spaces
Posts
Docs
Solutions
Pricing
Log In
Sign Up
huggingface-hub-ci
/
test_safetensors_metadata
like
0
PyTorch
Model card
Files
Files and versions
Community
1
refs/pr/1
test_safetensors_metadata
1 contributor
History:
3 commits
SFconvertbot
Adding `safetensors` variant of this model
e79471e
12 months ago
.gitattributes
Safe
1.52 kB
initial commit
12 months ago
model.safetensors
Safe
352 kB
LFS
Adding `safetensors` variant of this model
12 months ago
pytorch_model.bin
Safe
pickle
Detected Pickle imports (4)
"torch.FloatStorage"
,
"collections.OrderedDict"
,
"torch._utils._rebuild_tensor_v2"
,
"torch.LongStorage"
What is a pickle import?
371 kB
LFS
Upload pytorch_model.bin
12 months ago