Model checkpoint is unsafe?
#1
by
hlapp
- opened
@micheller7171 , any ideas? You made more updates to the repo after uploading the weights--I'm guessing you didn't see this banner at the time? I wish the warning gave more information.
I'm not entirely sure; after a quick search it might have something to do with the pickle scanning. I'll go ahead and remove the model file in the meantime while I look into how to fix it.
I don't think the model file needs to be removed in the short term, assuming we created it and it hasn't been tampered with since. The list of detected imports looks fine (despite the highlighting), so I'm not seeing any evidence that this isn't a false positive.