jbilcke-hf
/

sdxl-foundation-2

stable-diffusion-xl

stable-diffusion-xl-diffusers

Model card Files Files and versions Community

sdxl-foundation-2 / checkpoint-2000

1 contributor

History: 1 commit

This model has 12 files scanned as suspicious.

jbilcke-hf's picture

jbilcke-hf HF staff

saving checkpoint-2000

f77d7a0 12 months ago

optimizer.bin
Detected Pickle imports (4)
- "torch.ByteStorage",
- "collections.OrderedDict",
- "torch.FloatStorage",
- "torch._utils._rebuild_tensor_v2"
What is a pickle import?
15 MB
LFS

saving checkpoint-2000 12 months ago
pytorch_lora_weights.safetensors

23.4 MB
LFS

saving checkpoint-2000 12 months ago
random_states_0.pkl
Detected Pickle imports (7)
- "numpy.ndarray",
- "torch._utils._rebuild_tensor_v2",
- "numpy.dtype",
- "numpy.core.multiarray._reconstruct",
- "torch.ByteStorage",
- "collections.OrderedDict",
- "_codecs.encode"
How to fix it?
14.6 kB
LFS

saving checkpoint-2000 12 months ago
scaler.pt
Pickle imports
- No problematic imports detected
What is a pickle import?
557 Bytes
LFS

saving checkpoint-2000 12 months ago
scheduler.bin
Pickle imports
- No problematic imports detected
What is a pickle import?
563 Bytes
LFS

saving checkpoint-2000 12 months ago