--- license: apache-2.0 pipeline_tag: text-generation library_name: transformers base_model: unsloth/Qwen3-Coder-30B-A3B-Instruct tags: - securecoder - peft - lora - adapter - code - tool-calling - security - cybersecurity - qwen3 - qwen3_moe - unsloth - known-issue --- # SecureCoder 30B Pro v1 — LoRA adapter (deprecated, known defect) > [!WARNING] > **Deprecated. This adapter produces code that does not parse** — it emits the literal > two-character sequence `\n` instead of real newlines, so Python blocks fail > `ast.parse` at line 1. > > Measured on identical prompts with the same harness: > > | Model | literal `\n` in replies | valid Python | > |---|---:|---:| > | `unsloth/Qwen3-Coder-30B-A3B-Instruct` (base) | — | **93.3%** | > | this adapter | 14/15 | ~6.7% | > > **Root cause:** the training mix contains datasets whose message text is stored > **JSON-escaped** (Trendyol Cybersecurity, Fenrir v2.1, OWASP-sft, Heimdall v1.1, > CTF-Instruct). 183 of 480 sampled rows were affected. > > **Fixed** in [`Taimwe/securecoder-scripts`](https://huggingface.co/Taimwe/securecoder-scripts) > (`_unescape_if_needed()`, commit `51a4d639`). > > The merged weights and GGUF that were built from this adapter — including > `securecoder-30b-pro-merged` (345 downloads) — were **deleted** because they shipped > broken output. ## What is here Only the **LoRA adapter** (53.5 MB), kept for reproducibility. Everything built from it was removed. For a working code model use the base [`unsloth/Qwen3-Coder-30B-A3B-Instruct`](https://huggingface.co/unsloth/Qwen3-Coder-30B-A3B-Instruct). ## Adapter config | | | |---|---| | Type | LoRA (`peft 0.21.0`) | | Rank `r` / alpha | 32 / 32 | | Target modules | `q_proj`, `k_proj`, `v_proj`, `o_proj` (attention only) | | Base | `Qwen3MoeForCausalLM` | ## Evidence and retrain instructions - [`securecoder-scripts/HANDOFF.md`](https://huggingface.co/Taimwe/securecoder-scripts/blob/main/HANDOFF.md) - [`securecoder-eval-base`](https://huggingface.co/Taimwe/securecoder-eval-base) — the 93.3% reference ## License Apache-2.0, following the base model.