Squirz
/

phase2

StableDiffusionPipeline

stable-diffusion

Model card Files Files and versions

phase2 / safety_checker

2.43 GB

Ctrl+K

Ctrl+K

1 contributor

History: 1 commit

Squirz's picture

Upload safety_checker with huggingface_hub

af73f25 about 3 years ago

config.json

4.72 kB
Upload safety_checker with huggingface_hub about 3 years ago
model.safetensors

1.22 GB
xet

Upload safety_checker with huggingface_hub about 3 years ago
pytorch_model.bin
Detected Pickle imports (4)
- "collections.OrderedDict",
- "torch._utils._rebuild_tensor_v2",
- "torch.FloatStorage",
- "torch.LongStorage"
What is a pickle import?
1.22 GB
xet

Upload safety_checker with huggingface_hub about 3 years ago