← Home

@huggingface/tasks

npm Repository Homepage

List of ML tasks for huggingface.co/tasks

100
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

julien-cpierriccoyotte508xenovagary149

Keywords

hubhuggingfacelanguages

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
npm-metadata url-dep:quicktype-core AI (npm-metadata): Pinned to HuggingFace's own fork/tag, devDependency only, not shipped. ai
phantom-deps phantom-dep:node-fetch AI (phantom-deps): Used indirectly/config-referenced; not a real risk. ai
semgrep semgrep:shady-links-raw-ip AI (semgrep): 127.0.0.1 localhost references in test assertions for local model serving; stable FP. ai
semgrep semgrep:shady-links-tlds AI (semgrep): fasttext.cc is the official website for Facebook's fastText library. The .cc TLD triggered the heuristic but this is a legitimate documentation/reference URL in model library metadata, not malicious. ai

Versions (showing 100 of 268)

Version Deps Published
0.21.25 0 / 0
0.21.24 0 / 0
0.21.23 0 / 0
0.21.22 0 / 0
0.21.21 0 / 0
0.21.20 0 / 0
0.21.19 0 / 0
0.21.18 0 / 0
0.21.17 0 / 0
0.21.16 0 / 0
0.21.15 0 / 0
0.21.14 0 / 0
0.21.13 0 / 0
0.21.12 0 / 0
0.21.11 0 / 0
0.21.10 0 / 0
0.21.9 0 / 0
0.21.8 0 / 0
0.21.7 0 / 0
0.21.6 0 / 0
0.21.5 0 / 0
0.21.4 0 / 0
0.21.3 0 / 0
0.21.2 0 / 0
0.21.1 0 / 0
0.21.0 0 / 0
0.20.25 0 / 0
0.20.24 0 / 0
0.20.23 0 / 0
0.20.22 0 / 0
0.20.21 0 / 0
0.20.20 0 / 0
0.20.19 0 / 0
0.20.18 0 / 0
0.20.17 0 / 0
0.20.16 0 / 0
0.20.15 0 / 0
0.20.14 0 / 0
0.20.13 0 / 0
0.20.12 0 / 0
0.20.11 0 / 0
0.20.10 0 / 0
0.20.9 0 / 0
0.20.8 0 / 0
0.20.7 0 / 0
0.20.6 0 / 0
0.20.5 0 / 0
0.20.4 0 / 0
0.20.3 0 / 0
0.20.2 0 / 0
0.20.1 0 / 0
0.20.0 0 / 0
0.19.90 0 / 0
0.19.89 0 / 0
0.19.88 0 / 0
0.19.87 0 / 0
0.19.86 0 / 0
0.19.85 0 / 0
0.19.84 0 / 0
0.19.83 0 / 0
0.19.82 0 / 0
0.19.81 0 / 0
0.19.80 0 / 0
0.19.79 0 / 0
0.19.78 0 / 0
0.19.77 0 / 0
0.19.76 0 / 0
0.19.75 0 / 0
0.19.74 0 / 0
0.19.73 0 / 0
0.19.72 0 / 0
0.19.71 0 / 0
0.19.70 0 / 0
0.19.69 0 / 0
0.19.68 0 / 0
0.19.67 0 / 0
0.19.66 0 / 0
0.19.65 0 / 0
0.19.64 0 / 0
0.19.63 0 / 0
0.19.62 0 / 0
0.19.61 0 / 0
0.19.60 0 / 0
0.19.59 0 / 0
0.19.58 0 / 0
0.19.57 0 / 0
0.19.56 0 / 0
0.19.52 0 / 0
0.19.51 0 / 0
0.19.50 0 / 0
0.19.49 0 / 0
0.19.48 0 / 0
0.19.47 0 / 0
0.19.46 0 / 0
0.19.45 0 / 0
0.19.44 0 / 0
0.19.43 0 / 0
0.19.42 0 / 0
0.19.41 0 / 0
0.19.40 0 / 0
Showing 100 of 268 Next page →

v0.21.25

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.21.24

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.21.23

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.21.22

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.21.21

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.21.20

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.21.19

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.21.18

2 findings
HIGH shady-links-raw-ip: src/local-apps.spec.ts:176 semgrep

HTTP request to raw IP address — legitimate packages use domain names 174 | expect(snippet[0].content).toContain(`llama serve -hf bartowski/Llama-3.2-3B-Instruct-GGUF:{{QUANT_TAG}}`); 175 | expect(snippet[1].content).toContain("hermes config set model.provider custom"); > 176 | expect(snippet[1].content).toContain("hermes config set model.base_url http://127.0.0.1:8080/v1"); 177 | expect(snippet[1].content).toContain( 178 | "hermes config set model.default bartowski/Llama-3.2-3B-Instruct-GGUF:{{QUANT_TAG}}",

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.21.17

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.21.16

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.21.15

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.21.14

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.21.13

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.21.12

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.21.11

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.21.10

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.21.9

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.21.8

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.21.7

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.21.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.21.5

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.21.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.21.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.21.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.21.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.20.24

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.