A tool to load machine/deep learning models with security.
Many machine/deep learning libraries (PyTorch, Scikit-Learn and so on) save trained models solely based on Python pickle, while pickle is well known for its potential to execute malicious code when loading objects from untrusted sources.
This libary provides a secure tool to load pickled models by overriding the find_class method of standard python Unpickler class together with a series of global names -- whilelist. Only globals in the whilelist are allowed in loaded model objects, whereas the loading process interrupts when an untrusted global name is found to prevent any potential exploit.
This libary also provides utils to quickly update the global whilelist in case that the corresponding machine learning libraries are updated.
Release files for model-unpickler 0.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| model-unpickler-0.1.tar.gz | 17.2 kB | Without provenance | Details for model-unpickler-0.1.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| model_unpickler-0.1-py3-none-any.whl | Python 3 | none | any | Details for model_unpickler-0.1-py3-none-any.whl |
Total release size: 34.2 kB
Release files / model-unpickler-0.1.tar.gz
| Download URL | model-unpickler-0.1.tar.gz |
|---|---|
| Size | 17.2 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
ce9c25275386f2d582f0f4801f7c4e4d6135ac849e2373abad4f62b0955c77a2
|
|
BLAKE2b-256 checksum How to use checksums |
adc4261c3bedf98fb4576922614a57870c526b24084f51a49f137ab98ee10a7c
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/3.7.1 importlib_metadata/3.10.0 pkginfo/1.8.2 requests/2.26.0 requests-toolbelt/0.9.1 tqdm/4.60.0 CPython/3.7.11
|
Release files / model_unpickler-0.1-py3-none-any.whl
| Download URL | model_unpickler-0.1-py3-none-any.whl |
|---|---|
| Size | 16.9 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
510f414a63219b6b0582434afc1247280850eb8e3ab0da4d9eb2ff0ad2c75559
|
|
BLAKE2b-256 checksum How to use checksums |
e1961cf9f73c5cce4b0ac5afb2df543c92f193f7cd09dffa4b9334b5ea6c808c
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/3.7.1 importlib_metadata/3.10.0 pkginfo/1.8.2 requests/2.26.0 requests-toolbelt/0.9.1 tqdm/4.60.0 CPython/3.7.11
|
Security for model-unpickler 0.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
