badmonk
/

sakurako

StableDiffusionPipeline

stable-diffusion

Inference Endpoints

Model card Files Files and versions Community

sakurako / safety_checker

2 contributors

History: 2 commits

badmonk's picture

Adding `safetensors` variant of this model (#1)

08c6280 verified 3 months ago

config.json

4.72 kB

Upload folder using huggingface_hub 6 months ago
model.safetensors

1.22 GB
LFS

Adding `safetensors` variant of this model (#1) 3 months ago
pytorch_model.bin
Detected Pickle imports (4)
- "torch._utils._rebuild_tensor_v2",
- "torch.LongStorage",
- "collections.OrderedDict",
- "torch.FloatStorage"
What is a pickle import?
1.22 GB
LFS

Upload folder using huggingface_hub 6 months ago
pytorch_model.fp16.bin
Detected Pickle imports (4)
- "torch.HalfStorage",
- "torch._utils._rebuild_tensor_v2",
- "torch.LongStorage",
- "collections.OrderedDict"
What is a pickle import?
608 MB
LFS

Upload folder using huggingface_hub 6 months ago
pytorch_model.fp16.safetensors

608 MB
LFS

Adding `safetensors` variant of this model (#1) 3 months ago