Hugging Face
Models
Datasets
Spaces
Buckets
new
Docs
Enterprise
Pricing
Website
Tasks
HuggingChat
Collections
Languages
Organizations
Community
Blog
Posts
Daily Papers
Learn
Discord
Forum
GitHub
Solutions
Team & Enterprise
Hugging Face PRO
Enterprise Support
Inference Providers
Inference Endpoints
Storage Buckets
Log In
Sign Up
wyl88
/
rdt_5000
like
0
PyTorch
Safetensors
model_hub_mixin
pytorch_model_hub_mixin
Model card
Files
Files and versions
xet
Community
1
refs/pr/1
rdt_5000
2.46 GB
Ctrl+K
Ctrl+K
1 contributor
History:
3 commits
wyl88
2e6b9ce53c7a9ab7b14bab0abcda1f6bf030b42854e150f272397bef5e43d685
f1e0c5b
verified
about 1 year ago
.gitattributes
Safe
1.52 kB
initial commit
about 1 year ago
config.json
Safe
919 Bytes
2e6b9ce53c7a9ab7b14bab0abcda1f6bf030b42854e150f272397bef5e43d685
about 1 year ago
pytorch_model.bin
pickle
Detected Pickle imports (3)
"torch._utils._rebuild_tensor_v2"
,
"torch.BFloat16Storage"
,
"collections.OrderedDict"
What is a pickle import?
2.46 GB
xet
ca444b6a8cd940ea70d3540086ea67ccf36b4859e48f9adb64448a07fb7fbb10
about 1 year ago
scheduler.bin
Safe
pickle
Pickle imports
No problematic imports detected
What is a pickle import?
1 kB
xet
2e6b9ce53c7a9ab7b14bab0abcda1f6bf030b42854e150f272397bef5e43d685
about 1 year ago