@huggingface/transformers
State-of-the-art Machine Learning for the web. Run 🤗 Transformers directly in your browser, with no need for a server!
88%
Total Score
healthy
Active organization-backed project with frequent releases and contributors; missing security policy and build attestation are the main gaps.
Health Score Breakdown
No build attestation or trusted-publisher identity is recorded, leaving the connection between source and published artifact less transparent.
The repository has no SECURITY.md or equivalent security policy, leaving vulnerability-reporting and response expectations undocumented.
All five workflows were analyzed, all 12 action references are pinned, and no untrusted checkout or script injection was found. The low-confidence cache-poisoning finding is hygiene, while the high-confidence trusted-publishing finding warrants caution about release-workflow transparency.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 sharp Version ^0.35.4 | — | — |
onnxruntime-web Version 1.31.0-dev.20260914-8d85527a0 | — | — |
onnxruntime-node Version 1.30.0 | — | — |
@huggingface/jinja Version ^0.5.10 | — | — |
@huggingface/tokenizers Version ^0.2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 days ago
- Created
- 2 years ago
- Unpacked Size
- 9.6 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.