Model checkpoint is unsafe?

#1
by hlapp - opened
HDR Imageomics Institute org

The main page for this model repo shows this banner at the top:
image.png

One question is why, and the other is whether this can be fixed or suppressed, assuming that the model file is in fact not unsafe?

HDR Imageomics Institute org

@micheller7171 , any ideas? You made more updates to the repo after uploading the weights--I'm guessing you didn't see this banner at the time? I wish the warning gave more information.

HDR Imageomics Institute org

I'm not entirely sure; after a quick search it might have something to do with the pickle scanning. I'll go ahead and remove the model file in the meantime while I look into how to fix it.

HDR Imageomics Institute org

I don't think the model file needs to be removed in the short term, assuming we created it and it hasn't been tampered with since. The list of detected imports looks fine (despite the highlighting), so I'm not seeing any evidence that this isn't a false positive.

Sign up or log in to comment