Hugging Face
Models
Datasets
Spaces
Posts
Docs
Enterprise
Pricing
Log In
Sign Up
ai-forever
/
Kandinsky3.1
like
27
arxiv:
2312.03511
arxiv:
2311.17042
License:
apache-2.0
Model card
Files
Files and versions
Community
5
refs/pr/4
Kandinsky3.1
/
weights
/
flan_ul2_encoder
2 contributors
History:
2 commits
SFconvertbot
Adding `safetensors` variant of this model
39f7620
verified
9 months ago
added_tokens.json
Safe
665 Bytes
Upload folder using huggingface_hub
11 months ago
config.json
Safe
790 Bytes
Upload folder using huggingface_hub
11 months ago
projection.pt
Safe
pickle
Detected Pickle imports (3)
"torch._utils._rebuild_tensor_v2"
,
"torch.FloatStorage"
,
"collections.OrderedDict"
What is a pickle import?
67.1 MB
LFS
Upload folder using huggingface_hub
11 months ago
projection_flash.pt
Safe
pickle
Detected Pickle imports (3)
"torch._utils._rebuild_tensor_v2"
,
"torch.FloatStorage"
,
"collections.OrderedDict"
What is a pickle import?
67.1 MB
LFS
Upload folder using huggingface_hub
11 months ago
projection_inpainting.pt
Safe
pickle
Detected Pickle imports (3)
"torch._utils._rebuild_tensor_v2"
,
"torch.FloatStorage"
,
"collections.OrderedDict"
What is a pickle import?
67.1 MB
LFS
Upload folder using huggingface_hub
11 months ago
pytorch_model-00001-of-00004.bin
Safe
pickle
Detected Pickle imports (3)
"torch.FloatStorage"
,
"torch._utils._rebuild_tensor_v2"
,
"collections.OrderedDict"
What is a pickle import?
9.92 GB
LFS
Upload folder using huggingface_hub
11 months ago
pytorch_model-00001-of-00004.safetensors
Safe
9.92 GB
LFS
Adding `safetensors` variant of this model
9 months ago
pytorch_model-00002-of-00004.bin
Safe
pickle
Detected Pickle imports (3)
"collections.OrderedDict"
,
"torch.FloatStorage"
,
"torch._utils._rebuild_tensor_v2"
What is a pickle import?
10 GB
LFS
Upload folder using huggingface_hub
11 months ago
pytorch_model-00002-of-00004.safetensors
Safe
10 GB
LFS
Adding `safetensors` variant of this model
9 months ago
pytorch_model-00003-of-00004.bin
Safe
pickle
Detected Pickle imports (3)
"torch.FloatStorage"
,
"torch._utils._rebuild_tensor_v2"
,
"collections.OrderedDict"
What is a pickle import?
9.87 GB
LFS
Upload folder using huggingface_hub
11 months ago
pytorch_model-00003-of-00004.safetensors
Safe
9.87 GB
LFS
Adding `safetensors` variant of this model
9 months ago
pytorch_model-00004-of-00004.bin
Safe
pickle
Detected Pickle imports (3)
"torch._utils._rebuild_tensor_v2"
,
"torch.FloatStorage"
,
"collections.OrderedDict"
What is a pickle import?
5.1 GB
LFS
Upload folder using huggingface_hub
11 months ago
pytorch_model-00004-of-00004.safetensors
Safe
5.1 GB
LFS
Adding `safetensors` variant of this model
9 months ago
pytorch_model.bin.index.json
Safe
26.5 kB
Upload folder using huggingface_hub
11 months ago
special_tokens_map.json
Safe
2.2 kB
Upload folder using huggingface_hub
11 months ago
spiece.model
Safe
792 kB
LFS
Upload folder using huggingface_hub
11 months ago
tokenizer_config.json
Safe
2.35 kB
Upload folder using huggingface_hub
11 months ago
