masahiroid commited on
Commit
263c9c6
·
verified ·
1 Parent(s): ca027c1

Add model-audit-lite scan (report, BOM, summary)

Browse files
Files changed (3) hide show
  1. audit/bom.json +156 -0
  2. audit/report.md +24 -0
  3. audit/summary.json +10 -0
audit/bom.json ADDED
@@ -0,0 +1,156 @@
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
+ {
2
+ "bomFormat": "CycloneDX",
3
+ "specVersion": "1.6",
4
+ "serialNumber": "urn:uuid:3fa0ae39-d832-4030-b7d0-afafa850f1b4",
5
+ "version": 1,
6
+ "metadata": {
7
+ "timestamp": "2026-10-17T18:10:13Z",
8
+ "tools": {
9
+ "components": [
10
+ {
11
+ "type": "application",
12
+ "name": "model-audit-lite",
13
+ "version": "0.7.0"
14
+ }
15
+ ]
16
+ },
17
+ "component": {
18
+ "type": "machine-learning-model",
19
+ "bom-ref": "hf:masahiroid/UserRepGen-4B-4bit-mlx@bbc7eb166b2dbfc89a616ac61adfa68af9e2ba5c",
20
+ "name": "masahiroid/UserRepGen-4B-4bit-mlx",
21
+ "version": "bbc7eb166b2dbfc89a616ac61adfa68af9e2ba5c"
22
+ }
23
+ },
24
+ "components": [
25
+ {
26
+ "type": "machine-learning-model",
27
+ "bom-ref": "hf:masahiroid/UserRepGen-4B-4bit-mlx@bbc7eb166b2dbfc89a616ac61adfa68af9e2ba5c",
28
+ "name": "masahiroid/UserRepGen-4B-4bit-mlx",
29
+ "externalReferences": [
30
+ {
31
+ "type": "distribution",
32
+ "url": "https://huggingface.co/masahiroid/UserRepGen-4B-4bit-mlx"
33
+ }
34
+ ],
35
+ "version": "bbc7eb166b2dbfc89a616ac61adfa68af9e2ba5c",
36
+ "licenses": [
37
+ {
38
+ "license": {
39
+ "id": "mit"
40
+ }
41
+ }
42
+ ],
43
+ "components": [
44
+ {
45
+ "type": "file",
46
+ "bom-ref": "hf:masahiroid/UserRepGen-4B-4bit-mlx@bbc7eb166b2dbfc89a616ac61adfa68af9e2ba5c#chat_template.jinja",
47
+ "name": "chat_template.jinja",
48
+ "hashes": [
49
+ {
50
+ "alg": "SHA-256",
51
+ "content": "a4aee8afcf2e0711942cf848899be66016f8d14a889ff9ede07bca099c28f715"
52
+ }
53
+ ]
54
+ },
55
+ {
56
+ "type": "file",
57
+ "bom-ref": "hf:masahiroid/UserRepGen-4B-4bit-mlx@bbc7eb166b2dbfc89a616ac61adfa68af9e2ba5c#config.json",
58
+ "name": "config.json",
59
+ "hashes": [
60
+ {
61
+ "alg": "SHA-256",
62
+ "content": "8591d683d8d132234766399897415b9427967c05e77c1c169a40de3e81177e62"
63
+ }
64
+ ]
65
+ },
66
+ {
67
+ "type": "file",
68
+ "bom-ref": "hf:masahiroid/UserRepGen-4B-4bit-mlx@bbc7eb166b2dbfc89a616ac61adfa68af9e2ba5c#model.safetensors",
69
+ "name": "model.safetensors",
70
+ "hashes": [
71
+ {
72
+ "alg": "SHA-256",
73
+ "content": "8696704aeac94f11bae9025aa0f0c365969383b8fe6309b147263a5e568204d0"
74
+ }
75
+ ]
76
+ },
77
+ {
78
+ "type": "file",
79
+ "bom-ref": "hf:masahiroid/UserRepGen-4B-4bit-mlx@bbc7eb166b2dbfc89a616ac61adfa68af9e2ba5c#model.safetensors.index.json",
80
+ "name": "model.safetensors.index.json",
81
+ "hashes": [
82
+ {
83
+ "alg": "SHA-256",
84
+ "content": "5a3779ecc1a94f395f26612fdc9a491c1884250eda9353d214322717564a69c7"
85
+ }
86
+ ]
87
+ },
88
+ {
89
+ "type": "file",
90
+ "bom-ref": "hf:masahiroid/UserRepGen-4B-4bit-mlx@bbc7eb166b2dbfc89a616ac61adfa68af9e2ba5c#tokenizer.json",
91
+ "name": "tokenizer.json",
92
+ "hashes": [
93
+ {
94
+ "alg": "SHA-256",
95
+ "content": "06b9509352d2af50381ab2247e083b80d32d5c0aba91c272ca9ff729b6a0e523"
96
+ }
97
+ ]
98
+ },
99
+ {
100
+ "type": "file",
101
+ "bom-ref": "hf:masahiroid/UserRepGen-4B-4bit-mlx@bbc7eb166b2dbfc89a616ac61adfa68af9e2ba5c#tokenizer_config.json",
102
+ "name": "tokenizer_config.json",
103
+ "hashes": [
104
+ {
105
+ "alg": "SHA-256",
106
+ "content": "95c557768e6b88a7128befc7bfd3c7de50e5d51af9b8b33a9f4dee0e04f99679"
107
+ }
108
+ ]
109
+ }
110
+ ],
111
+ "pedigree": {
112
+ "ancestors": [
113
+ {
114
+ "type": "machine-learning-model",
115
+ "bom-ref": "hf:microsoft/UserRepGen-4B@bfc905b249365cab00e94ba308f2cea5b23bbc6e",
116
+ "name": "microsoft/UserRepGen-4B",
117
+ "externalReferences": [
118
+ {
119
+ "type": "distribution",
120
+ "url": "https://huggingface.co/microsoft/UserRepGen-4B"
121
+ }
122
+ ],
123
+ "version": "bfc905b249365cab00e94ba308f2cea5b23bbc6e"
124
+ }
125
+ ],
126
+ "notes": "Converted/derived from microsoft/UserRepGen-4B. Lineage is declared by the publisher; see properties for checks."
127
+ },
128
+ "properties": [
129
+ {
130
+ "name": "model-audit-lite:total-files",
131
+ "value": "8"
132
+ },
133
+ {
134
+ "name": "model-audit-lite:risky-pickle-files",
135
+ "value": "0"
136
+ },
137
+ {
138
+ "name": "model-audit-lite:custom-code-files",
139
+ "value": "0"
140
+ },
141
+ {
142
+ "name": "model-audit-lite:formats",
143
+ "value": "safetensors,mlx"
144
+ },
145
+ {
146
+ "name": "model-audit-lite:derived-from",
147
+ "value": "microsoft/UserRepGen-4B"
148
+ },
149
+ {
150
+ "name": "model-audit-lite:chat-template-changed",
151
+ "value": "false"
152
+ }
153
+ ]
154
+ }
155
+ ]
156
+ }
audit/report.md ADDED
@@ -0,0 +1,24 @@
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
+ # model-audit-lite scan: masahiroid/UserRepGen-4B-4bit-mlx
2
+
3
+ ## 配布物としての安全性監査
4
+
5
+ - **pickle形式チェック**: pickle形式(`.bin`/`.pt`/`.pth`/`.pkl`など)は検出されませんでした。
6
+ - **同梱コードチェック**: `trust_remote_code`が必要なカスタムPythonコードは検出されませんでした。
7
+ - **チェックサム (SHA256)**:
8
+
9
+ ```
10
+ a4aee8afcf2e0711942cf848899be66016f8d14a889ff9ede07bca099c28f715 chat_template.jinja
11
+ 8591d683d8d132234766399897415b9427967c05e77c1c169a40de3e81177e62 config.json
12
+ 8696704aeac94f11bae9025aa0f0c365969383b8fe6309b147263a5e568204d0 model.safetensors
13
+ 5a3779ecc1a94f395f26612fdc9a491c1884250eda9353d214322717564a69c7 model.safetensors.index.json
14
+ 06b9509352d2af50381ab2247e083b80d32d5c0aba91c272ca9ff729b6a0e523 tokenizer.json
15
+ 95c557768e6b88a7128befc7bfd3c7de50e5d51af9b8b33a9f4dee0e04f99679 tokenizer_config.json
16
+ ```
17
+
18
+
19
+ ## Chat Templateの変換完全性チェック
20
+
21
+ 変換元リポジトリ(`microsoft/UserRepGen-4B`)と変換後リポジトリ(`masahiroid/UserRepGen-4B-4bit-mlx`)のchat template(`chat_template.jinja`、または`tokenizer_config.json`内の`chat_template`フィールド)を比較した結果です。
22
+
23
+ - ✅ 変換元と完全に一致しています。改変は検出されませんでした。
24
+
audit/summary.json ADDED
@@ -0,0 +1,10 @@
 
 
 
 
 
 
 
 
 
 
 
1
+ {
2
+ "repo_id": "masahiroid/UserRepGen-4B-4bit-mlx",
3
+ "status": "pass",
4
+ "fail": [],
5
+ "warn": [],
6
+ "files": 8,
7
+ "pickle_files": 0,
8
+ "custom_code_files": 0,
9
+ "chat_template_changed": false
10
+ }