Skip to content

add unsafe weight, tombstone parent, param mismatch, and author findings#17

Merged
gavxm merged 3 commits into
mainfrom
finding-types
Jun 4, 2026
Merged

add unsafe weight, tombstone parent, param mismatch, and author findings#17
gavxm merged 3 commits into
mainfrom
finding-types

Conversation

@gavxm

@gavxm gavxm commented Jun 4, 2026

Copy link
Copy Markdown
Owner

add unsafe_weight_format finding for pickle-capable weight files (.bin, .pkl, .pth, .pt, .ckpt), Medium when no safetensors alternative exists, Low when redundant.
add tombstone_parent finding when declared parent returns 404.
add inaccessible_parent finding when declared parent returns 401/403, provenance unverifiable.
add parameter_count_mismatch finding to cross-reference tag claims (e.g. "7b") against config.json architecture dimensions.
add single_model_author finding when uploader has only 1 model on HuggingFace.
add web UI link mappings for all 5 new finding IDs.
verified against jquave/gpt4all-lora-unfiltered-quantized and Josiah-Legg/Avery-V4-txt-Q8_0-GGUF.
22 finding types total, up from 17.

@gavxm gavxm self-assigned this Jun 4, 2026
@gavxm
gavxm merged commit 218b5f9 into main Jun 4, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant