Sfischer
/

private1

StableDiffusionPipeline

stable-diffusion

Model card Files Files and versions

private1 / safety_checker

2.43 GB

Ctrl+K

Ctrl+K

1 contributor

History: 1 commit

Sfischer's picture

Upload safety_checker with huggingface_hub

b18e410 about 3 years ago

config.json

4.72 kB
Upload safety_checker with huggingface_hub about 3 years ago
model.safetensors

1.22 GB
xet

Upload safety_checker with huggingface_hub about 3 years ago
pytorch_model.bin
Detected Pickle imports (4)
- "collections.OrderedDict",
- "torch._utils._rebuild_tensor_v2",
- "torch.FloatStorage",
- "torch.LongStorage"
What is a pickle import?
1.22 GB
xet

Upload safety_checker with huggingface_hub about 3 years ago