cxyz
/

shrysrnsftl

StableDiffusionPipeline

stable-diffusion

Model card Files Files and versions

shrysrnsftl / safety_checker

2.43 GB

1 contributor

History: 1 commit

cxyz's picture

Upload safety_checker with huggingface_hub

00334ca over 2 years ago

config.json

4.72 kB

Upload safety_checker with huggingface_hub over 2 years ago
model.safetensors

1.22 GB
xet

Upload safety_checker with huggingface_hub over 2 years ago
pytorch_model.bin
Detected Pickle imports (4)
- "torch._utils._rebuild_tensor_v2",
- "collections.OrderedDict",
- "torch.FloatStorage",
- "torch.LongStorage"
What is a pickle import?
1.22 GB
xet

Upload safety_checker with huggingface_hub over 2 years ago