Hugging Face
Models
Datasets
Spaces
Buckets
new
Docs
Enterprise
Pricing
Log In
Sign Up
liu121
/
illmac
like
0
PyTorch
llama
License:
apache-2.0
Model card
Files
Files and versions
xet
Community
1
refs/pr/1
illmac
53.9 GB
2 contributors
History:
6 commits
SFconvertbot
Adding `safetensors` variant of this model
85ffaf5
verified
about 1 year ago
.gitattributes
Safe
1.52 kB
initial commit
about 1 year ago
README.md
Safe
31 Bytes
initial commit
about 1 year ago
added_tokens.json
Safe
21 Bytes
Upload 10 files
about 1 year ago
config.json
Safe
563 Bytes
Upload 10 files
about 1 year ago
generation_config.json
Safe
132 Bytes
Upload 10 files
about 1 year ago
pytorch_model-00001-of-00003.bin
Safe
pickle
Detected Pickle imports (3)
"collections.OrderedDict"
,
"torch._utils._rebuild_tensor_v2"
,
"torch.FloatStorage"
What is a pickle import?
9.88 GB
xet
Upload pytorch_model-00001-of-00003.bin
about 1 year ago
pytorch_model-00001-of-00003.safetensors
Safe
9.88 GB
xet
Adding `safetensors` variant of this model
about 1 year ago
pytorch_model-00002-of-00003.bin
Safe
pickle
Detected Pickle imports (3)
"collections.OrderedDict"
,
"torch.FloatStorage"
,
"torch._utils._rebuild_tensor_v2"
What is a pickle import?
9.89 GB
xet
Upload pytorch_model-00002-of-00003.bin
about 1 year ago
pytorch_model-00002-of-00003.safetensors
Safe
9.89 GB
xet
Adding `safetensors` variant of this model
about 1 year ago
pytorch_model-00003-of-00003.bin
Safe
pickle
Detected Pickle imports (3)
"torch.FloatStorage"
,
"torch._utils._rebuild_tensor_v2"
,
"collections.OrderedDict"
What is a pickle import?
7.18 GB
xet
Upload pytorch_model-00003-of-00003.bin
about 1 year ago
pytorch_model-00003-of-00003.safetensors
Safe
7.18 GB
xet
Adding `safetensors` variant of this model
about 1 year ago
pytorch_model.bin.index.json
26.8 kB
Upload 10 files
about 1 year ago
special_tokens_map.json
435 Bytes
Upload 10 files
about 1 year ago
tokenizer.model
Safe
500 kB
xet
Upload 10 files
about 1 year ago
tokenizer_config.json
726 Bytes
Upload 10 files
about 1 year ago
trainer_state.json
Safe
98.4 kB
Upload 10 files
about 1 year ago
training_args.bin
Suspicious
pickle
Detected Pickle imports (6)
"__main__.TrainingArguments"
,
"transformers.trainer_utils.SchedulerType"
,
"transformers.trainer_utils.HubStrategy"
,
"transformers.trainer_utils.IntervalStrategy"
,
"transformers.training_args.OptimizerNames"
,
"torch.device"
How to fix it?
3.64 kB
xet
Upload 10 files
about 1 year ago
