Security: bilingual SECURITY.md with verified-conversion audit (model-audit-lite 0.5.2), ML-BOM, README link
34d5cf1 verified | { | |
| "bomFormat": "CycloneDX", | |
| "specVersion": "1.6", | |
| "serialNumber": "urn:uuid:de677057-31f2-4e0e-8d4b-66c4ddd1bc9d", | |
| "version": 1, | |
| "metadata": { | |
| "timestamp": "2026-10-03T12:15:15Z", | |
| "tools": { | |
| "components": [ | |
| { | |
| "type": "application", | |
| "name": "model-audit-lite", | |
| "version": "0.5.2" | |
| } | |
| ] | |
| }, | |
| "component": { | |
| "type": "machine-learning-model", | |
| "bom-ref": "hf:masahiroid/bart-large-cnn-mlx@0f24e8710153fb25114f89467b48f1b6e9a058cf", | |
| "name": "masahiroid/bart-large-cnn-mlx", | |
| "version": "0f24e8710153fb25114f89467b48f1b6e9a058cf" | |
| } | |
| }, | |
| "components": [ | |
| { | |
| "type": "machine-learning-model", | |
| "bom-ref": "hf:masahiroid/bart-large-cnn-mlx@0f24e8710153fb25114f89467b48f1b6e9a058cf", | |
| "name": "masahiroid/bart-large-cnn-mlx", | |
| "externalReferences": [ | |
| { | |
| "type": "distribution", | |
| "url": "https://huggingface.co/masahiroid/bart-large-cnn-mlx" | |
| } | |
| ], | |
| "version": "0f24e8710153fb25114f89467b48f1b6e9a058cf", | |
| "licenses": [ | |
| { | |
| "license": { | |
| "id": "mit" | |
| } | |
| } | |
| ], | |
| "components": [ | |
| { | |
| "type": "file", | |
| "bom-ref": "hf:masahiroid/bart-large-cnn-mlx@0f24e8710153fb25114f89467b48f1b6e9a058cf#bart_mlx.py", | |
| "name": "bart_mlx.py", | |
| "hashes": [ | |
| { | |
| "alg": "SHA-256", | |
| "content": "ea19c36b8ee76629ce267c572900a010ef88b3ba946d1fd65f9dc3d7b6ca73b7" | |
| } | |
| ] | |
| }, | |
| { | |
| "type": "file", | |
| "bom-ref": "hf:masahiroid/bart-large-cnn-mlx@0f24e8710153fb25114f89467b48f1b6e9a058cf#model.safetensors", | |
| "name": "model.safetensors", | |
| "hashes": [ | |
| { | |
| "alg": "SHA-256", | |
| "content": "c7eabee28012c9da72b41308aa9388ee248ee371db51e4ed5a48cdb80352dd95" | |
| } | |
| ] | |
| } | |
| ], | |
| "pedigree": { | |
| "ancestors": [ | |
| { | |
| "type": "machine-learning-model", | |
| "bom-ref": "hf:facebook/bart-large-cnn@37f520fa929c961707657b28798b30c003dd100b", | |
| "name": "facebook/bart-large-cnn", | |
| "externalReferences": [ | |
| { | |
| "type": "distribution", | |
| "url": "https://huggingface.co/facebook/bart-large-cnn" | |
| } | |
| ], | |
| "version": "37f520fa929c961707657b28798b30c003dd100b" | |
| } | |
| ], | |
| "notes": "Converted/derived from facebook/bart-large-cnn. Lineage is declared by the publisher; see properties for checks." | |
| }, | |
| "properties": [ | |
| { | |
| "name": "model-audit-lite:total-files", | |
| "value": "5" | |
| }, | |
| { | |
| "name": "model-audit-lite:risky-pickle-files", | |
| "value": "0" | |
| }, | |
| { | |
| "name": "model-audit-lite:custom-code-files", | |
| "value": "1" | |
| }, | |
| { | |
| "name": "model-audit-lite:custom-code-file", | |
| "value": "bart_mlx.py" | |
| }, | |
| { | |
| "name": "model-audit-lite:formats", | |
| "value": "safetensors,mlx" | |
| }, | |
| { | |
| "name": "model-audit-lite:derived-from", | |
| "value": "facebook/bart-large-cnn" | |
| }, | |
| { | |
| "name": "model-audit-lite:chat-template-changed", | |
| "value": "false" | |
| } | |
| ] | |
| } | |
| ] | |
| } |