Hugging Face
Models
Datasets
Spaces
Posts
Docs
Solutions
Pricing
Log In
Sign Up
henilp105
/
InjecAgent-lmsys-vicuna-7b-v1.5-10
like
0
PEFT
PyTorch
Safetensors
llama
arxiv:
1910.09700
Model card
Files
Files and versions
Community
Train
Use this model
9ae1a5d
InjecAgent-lmsys-vicuna-7b-v1.5-10
1 contributor
History:
4 commits
This model has 2 files scanned as suspicious.
Show
files
henilp105
Upload tokenizer
9ae1a5d
verified
4 months ago
.gitattributes
Safe
1.52 kB
initial commit
4 months ago
README.md
Safe
5.09 kB
Upload folder using huggingface_hub
4 months ago
adapter_config.json
Safe
645 Bytes
Upload folder using huggingface_hub
4 months ago
adapter_model.safetensors
Safe
16.8 MB
LFS
Upload folder using huggingface_hub
4 months ago
config.json
Safe
621 Bytes
Upload LlamaForCausalLM
4 months ago
generation_config.json
Safe
162 Bytes
Upload LlamaForCausalLM
4 months ago
optimizer.pt
Safe
pickle
Detected Pickle imports (3)
"collections.OrderedDict"
,
"torch.FloatStorage"
,
"torch._utils._rebuild_tensor_v2"
What is a pickle import?
33.6 MB
LFS
Upload folder using huggingface_hub
4 months ago
pytorch_model-00001-of-00002.bin
Safe
pickle
Detected Pickle imports (4)
"collections.OrderedDict"
,
"torch.FloatStorage"
,
"torch.HalfStorage"
,
"torch._utils._rebuild_tensor_v2"
What is a pickle import?
9.98 GB
LFS
Upload LlamaForCausalLM
4 months ago
pytorch_model-00002-of-00002.bin
Safe
pickle
Detected Pickle imports (4)
"collections.OrderedDict"
,
"torch.FloatStorage"
,
"torch.HalfStorage"
,
"torch._utils._rebuild_tensor_v2"
What is a pickle import?
3.5 GB
LFS
Upload LlamaForCausalLM
4 months ago
pytorch_model.bin.index.json
Safe
26.8 kB
Upload LlamaForCausalLM
4 months ago
rng_state.pth
Suspicious
pickle
Detected Pickle imports (7)
"numpy.ndarray"
,
"_codecs.encode"
,
"numpy.core.multiarray._reconstruct"
,
"torch._utils._rebuild_tensor_v2"
,
"collections.OrderedDict"
,
"torch.ByteStorage"
,
"numpy.dtype"
How to fix it?
14.2 kB
LFS
Upload folder using huggingface_hub
4 months ago
scheduler.pt
Safe
pickle
Pickle imports
No problematic imports detected
What is a pickle import?
1.06 kB
LFS
Upload folder using huggingface_hub
4 months ago
special_tokens_map.json
Safe
437 Bytes
Upload folder using huggingface_hub
4 months ago
tokenizer.json
Safe
1.84 MB
Upload tokenizer
4 months ago
tokenizer.model
Safe
500 kB
LFS
Upload folder using huggingface_hub
4 months ago
tokenizer_config.json
Safe
749 Bytes
Upload tokenizer
4 months ago
trainer_state.json
Safe
36.3 kB
Upload folder using huggingface_hub
4 months ago
training_args.bin
Suspicious
pickle
Detected Pickle imports (9)
"accelerate.state.PartialState"
,
"accelerate.utils.dataclasses.DistributedType"
,
"trl.trainer.sft_config.SFTConfig"
,
"transformers.trainer_utils.IntervalStrategy"
,
"transformers.trainer_pt_utils.AcceleratorConfig"
,
"transformers.training_args.OptimizerNames"
,
"torch.device"
,
"transformers.trainer_utils.HubStrategy"
,
"transformers.trainer_utils.SchedulerType"
How to fix it?
5.43 kB
LFS
Upload folder using huggingface_hub
4 months ago
