{"id":4455092,"name":"diffusers","ecosystem":"pypi","description":"State-of-the-art diffusion in PyTorch.","homepage":"https://github.com/huggingface/diffusers","licenses":"Apache 2.0 License","normalized_licenses":["Apache-1.1"],"repository_url":"https://github.com/huggingface/diffusers","keywords_array":["deep","learning","diffusion","pytorch","stable","diffusion","audioldm"],"namespace":null,"versions_count":103,"first_release_published_at":"2022-05-30T16:25:48.000Z","latest_release_published_at":"2026-10-27T07:22:24.000Z","latest_release_number":"0.42.1","latest_published_release_number":"0.42.1","last_synced_at":"2026-11-10T10:29:57.643Z","created_at":"2022-05-30T16:31:50.865Z","updated_at":"2026-11-10T10:29:57.644Z","registry_url":"https://pypi.org/project/diffusers/","install_command":"pip install diffusers --index-url https://pypi.org/simple","documentation_url":"https://diffusers.readthedocs.io/","metadata":{"funding":null,"documentation":null,"classifiers":["Development Status :: 5 - Production/Stable","Intended Audience :: Developers","Intended Audience :: Education","Intended Audience :: Science/Research","License :: OSI Approved :: Apache Software License","Operating System :: OS Independent","Programming Language :: Python :: 3","Programming Language :: Python :: 3.11","Topic :: Scientific/Engineering :: Artificial Intelligence"],"normalized_name":"diffusers","project_status":null},"repo_metadata":{"id":37080475,"uuid":"498011141","full_name":"huggingface/diffusers","owner":"huggingface","description":"🤗 Diffusers: State-of-the-art diffusion models for image, video, and audio generation in PyTorch.","archived":false,"fork":false,"pushed_at":"2026-11-03T17:14:10.000Z","size":114886,"stargazers_count":34856,"open_issues_count":1540,"forks_count":7456,"subscribers_count":219,"default_branch":"main","last_synced_at":"2026-11-04T02:53:58.343Z","etag":null,"topics":["deep-learning","diffusion","flux","image-generation","image2image","image2video","latent-diffusion-models","pytorch","qwen-image","score-based-generative-modeling","stable-diffusion","stable-diffusion-diffusers","text2image","text2video","video2video"],"latest_commit_sha":null,"homepage":"https://huggingface.co/docs/diffusers","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/huggingface.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":"SECURITY.md","accessibility":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"AGENTS.md","claude":"CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2022-05-30T16:04:02.000Z","updated_at":"2026-11-03T14:24:59.000Z","dependencies_parsed_at":"2026-10-20T11:51:36.892Z","dependency_job_id":null,"html_url":"https://github.com/huggingface/diffusers","commit_stats":{"total_commits":4480,"total_committers":789,"mean_commits":5.678073510773131,"dds":0.7928571428571428,"last_synced_commit":"2a1d2f62180aa01637b4c1d98e36c7570fd06b1f"},"previous_names":[],"tags_count":102,"template":false,"template_full_name":null,"purl":"pkg:github/huggingface/diffusers","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/huggingface","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/sbom","scorecard":{"id":472282,"data":{"date":"2025-08-11","repo":{"name":"github.com/huggingface/diffusers","commit":"58bf2682612bc29b7cdb8a10ba6eee28a024d6d3"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.6,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 15 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/build_docker_images.yml:66","Warn: no topLevel permission defined: .github/workflows/benchmark.yml:1","Warn: no topLevel permission defined: .github/workflows/build_docker_images.yml:1","Warn: no topLevel permission defined: .github/workflows/build_documentation.yml:1","Warn: no topLevel permission defined: .github/workflows/build_pr_documentation.yml:1","Warn: no topLevel permission defined: .github/workflows/mirror_community_pipeline.yml:1","Warn: no topLevel permission defined: .github/workflows/nightly_tests.yml:1","Warn: no topLevel permission defined: .github/workflows/notify_slack_about_release.yml:1","Warn: no topLevel permission defined: .github/workflows/pr_dependency_test.yml:1","Warn: no topLevel permission defined: .github/workflows/pr_flax_dependency_test.yml:1","Warn: no topLevel permission defined: .github/workflows/pr_modular_tests.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/pr_style_bot.yml:8","Warn: no topLevel permission defined: .github/workflows/pr_test_fetcher.yml:1","Warn: no topLevel permission defined: .github/workflows/pr_tests.yml:1","Warn: no topLevel permission defined: .github/workflows/pr_tests_gpu.yml:1","Warn: no topLevel permission defined: .github/workflows/pr_torch_dependency_test.yml:1","Warn: no topLevel permission defined: .github/workflows/push_tests.yml:1","Warn: no topLevel permission defined: .github/workflows/push_tests_fast.yml:1","Warn: no topLevel permission defined: .github/workflows/push_tests_mps.yml:1","Warn: no topLevel permission defined: .github/workflows/pypi_publish.yaml:1","Warn: no topLevel permission defined: .github/workflows/release_tests_fast.yml:1","Warn: no topLevel permission defined: .github/workflows/run_tests_from_a_pr.yml:1","Warn: no topLevel permission defined: .github/workflows/ssh-pr-runner.yml:1","Warn: no topLevel permission defined: .github/workflows/ssh-runner.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yml:1","Warn: no topLevel permission defined: .github/workflows/trufflehog.yml:1","Warn: no topLevel permission defined: .github/workflows/typos.yml:1","Warn: no topLevel permission defined: .github/workflows/update_metadata.yml:1","Warn: no topLevel permission defined: .github/workflows/upload_pr_documentation.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/build_docker_images.yml:60"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":6,"reason":"SAST tool is not run on all commits -- score normalized to 6","details":["Warn: 18 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/benchmark.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/benchmark.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_docker_images.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/build_docker_images.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_docker_images.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/build_docker_images.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_docker_images.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/build_docker_images.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_docker_images.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/build_docker_images.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_docker_images.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/build_docker_images.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_docker_images.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/build_docker_images.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_docker_images.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/build_docker_images.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_docker_images.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/build_docker_images.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_documentation.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/build_documentation.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_pr_documentation.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/build_pr_documentation.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mirror_community_pipeline.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/mirror_community_pipeline.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mirror_community_pipeline.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/mirror_community_pipeline.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_tests.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/nightly_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_tests.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/nightly_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_tests.yml:121: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/nightly_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_tests.yml:168: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/nightly_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_tests.yml:228: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/nightly_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_tests.yml:262: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/nightly_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_tests.yml:279: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/nightly_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_tests.yml:319: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/nightly_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_tests.yml:402: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/nightly_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_tests.yml:434: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/nightly_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_tests.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/nightly_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_tests.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/nightly_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_tests.yml:185: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/nightly_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_tests.yml:211: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/nightly_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_tests.yml:350: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/nightly_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_tests.yml:385: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/nightly_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_tests.yml:459: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/nightly_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_tests.yml:467: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/nightly_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_tests.yml:493: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/nightly_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/notify_slack_about_release.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/notify_slack_about_release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/notify_slack_about_release.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/notify_slack_about_release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_dependency_test.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_dependency_test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_dependency_test.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_dependency_test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_flax_dependency_test.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_flax_dependency_test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_flax_dependency_test.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_flax_dependency_test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_modular_tests.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_modular_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_modular_tests.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_modular_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_modular_tests.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_modular_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_modular_tests.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_modular_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_modular_tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_modular_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_modular_tests.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_modular_tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_style_bot.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_style_bot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_test_fetcher.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_test_fetcher.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_test_fetcher.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_test_fetcher.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_test_fetcher.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_test_fetcher.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_test_fetcher.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_test_fetcher.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_test_fetcher.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_test_fetcher.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_test_fetcher.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_test_fetcher.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_tests.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_tests.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_tests.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_tests.yml:160: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_tests.yml:192: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_tests.yml:221: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_tests.yml:246: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_tests.yml:285: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_tests.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_tests.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_tests_gpu.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_tests_gpu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_tests_gpu.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_tests_gpu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_tests_gpu.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_tests_gpu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_tests_gpu.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_tests_gpu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_tests_gpu.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_tests_gpu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_tests_gpu.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_tests_gpu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_tests_gpu.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_tests_gpu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_tests_gpu.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_tests_gpu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_tests_gpu.yml:197: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_tests_gpu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_tests_gpu.yml:243: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_tests_gpu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_tests_gpu.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_tests_gpu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_tests_gpu.yml:293: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_tests_gpu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_torch_dependency_test.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_torch_dependency_test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_torch_dependency_test.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pr_torch_dependency_test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push_tests.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/push_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push_tests.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/push_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push_tests.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/push_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push_tests.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/push_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push_tests.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/push_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push_tests.yml:157: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/push_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push_tests.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/push_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push_tests.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/push_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push_tests.yml:217: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/push_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push_tests.yml:242: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/push_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push_tests.yml:258: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/push_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push_tests.yml:291: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/push_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push_tests_fast.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/push_tests_fast.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push_tests_fast.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/push_tests_fast.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push_tests_mps.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/push_tests_mps.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push_tests_mps.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/push_tests_mps.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi_publish.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pypi_publish.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi_publish.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pypi_publish.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi_publish.yaml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pypi_publish.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi_publish.yaml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/pypi_publish.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release_tests_fast.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/release_tests_fast.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release_tests_fast.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/release_tests_fast.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release_tests_fast.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/release_tests_fast.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release_tests_fast.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/release_tests_fast.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release_tests_fast.yml:121: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/release_tests_fast.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release_tests_fast.yml:155: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/release_tests_fast.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release_tests_fast.yml:172: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/release_tests_fast.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release_tests_fast.yml:212: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/release_tests_fast.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release_tests_fast.yml:229: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/release_tests_fast.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release_tests_fast.yml:255: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/release_tests_fast.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release_tests_fast.yml:272: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/release_tests_fast.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release_tests_fast.yml:297: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/release_tests_fast.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release_tests_fast.yml:314: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/release_tests_fast.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release_tests_fast.yml:348: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/release_tests_fast.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run_tests_from_a_pr.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/run_tests_from_a_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ssh-pr-runner.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/ssh-pr-runner.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ssh-pr-runner.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/ssh-pr-runner.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ssh-runner.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/ssh-runner.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ssh-runner.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/ssh-runner.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/trufflehog.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/trufflehog.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/trufflehog.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/trufflehog.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/typos.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/typos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/typos.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/typos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update_metadata.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/update_metadata.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/upload_pr_documentation.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/huggingface/diffusers/upload_pr_documentation.yml/main?enable=pin","Warn: containerImage not pinned by hash: docker/diffusers-doc-builder/Dockerfile:1: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214","Warn: containerImage not pinned by hash: docker/diffusers-flax-cpu/Dockerfile:1: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214","Warn: containerImage not pinned by hash: docker/diffusers-flax-tpu/Dockerfile:1: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214","Warn: containerImage not pinned by hash: docker/diffusers-onnxruntime-cpu/Dockerfile:1: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214","Warn: containerImage not pinned by hash: docker/diffusers-onnxruntime-cuda/Dockerfile:1: pin your Docker image by updating nvidia/cuda:12.1.0-runtime-ubuntu20.04 to nvidia/cuda:12.1.0-runtime-ubuntu20.04@sha256:c1869c30f46fff478a37ed58d9dace7e08519541274f03424d0b78bd35b2c73a","Warn: containerImage not pinned by hash: docker/diffusers-pytorch-cpu/Dockerfile:1: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214","Warn: containerImage not pinned by hash: docker/diffusers-pytorch-cuda/Dockerfile:1: pin your Docker image by updating nvidia/cuda:12.1.0-runtime-ubuntu20.04 to nvidia/cuda:12.1.0-runtime-ubuntu20.04@sha256:c1869c30f46fff478a37ed58d9dace7e08519541274f03424d0b78bd35b2c73a","Warn: containerImage not pinned by hash: docker/diffusers-pytorch-minimum-cuda/Dockerfile:1: pin your Docker image by updating nvidia/cuda:12.1.0-runtime-ubuntu20.04 to nvidia/cuda:12.1.0-runtime-ubuntu20.04@sha256:c1869c30f46fff478a37ed58d9dace7e08519541274f03424d0b78bd35b2c73a","Warn: containerImage not pinned by hash: docker/diffusers-pytorch-xformers-cuda/Dockerfile:1: pin your Docker image by updating nvidia/cuda:12.1.0-runtime-ubuntu20.04 to nvidia/cuda:12.1.0-runtime-ubuntu20.04@sha256:c1869c30f46fff478a37ed58d9dace7e08519541274f03424d0b78bd35b2c73a","Warn: pipCommand not pinned by hash: docker/diffusers-flax-cpu/Dockerfile:30-47","Warn: pipCommand not pinned by hash: docker/diffusers-flax-tpu/Dockerfile:30-49","Warn: pipCommand not pinned by hash: docker/diffusers-flax-tpu/Dockerfile:30-49","Warn: pipCommand not pinned by hash: docker/diffusers-onnxruntime-cpu/Dockerfile:29-47","Warn: pipCommand not pinned by hash: .github/workflows/mirror_community_pipeline.yml:77","Warn: pipCommand not pinned by hash: .github/workflows/mirror_community_pipeline.yml:78","Warn: pipCommand not pinned by hash: .github/workflows/mirror_community_pipeline.yml:97","Warn: pipCommand not pinned by hash: .github/workflows/mirror_community_pipeline.yml:102","Warn: pipCommand not pinned by hash: .github/workflows/notify_slack_about_release.yml:24","Warn: pipCommand not pinned by hash: .github/workflows/pr_dependency_test.yml:29","Warn: pipCommand not pinned by hash: .github/workflows/pr_flax_dependency_test.yml:29","Warn: pipCommand not pinned by hash: .github/workflows/pr_modular_tests.yml:45","Warn: pipCommand not pinned by hash: .github/workflows/pr_modular_tests.yml:46","Warn: pipCommand not pinned by hash: .github/workflows/pr_modular_tests.yml:65","Warn: pipCommand not pinned by hash: .github/workflows/pr_modular_tests.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/pr_test_fetcher.yml:94","Warn: pipCommand not pinned by hash: .github/workflows/pr_test_fetcher.yml:95","Warn: pipCommand not pinned by hash: .github/workflows/pr_test_fetcher.yml:152","Warn: pipCommand not pinned by hash: .github/workflows/pr_tests.yml:255","Warn: pipCommand not pinned by hash: .github/workflows/pr_tests.yml:41","Warn: pipCommand not pinned by hash: .github/workflows/pr_tests.yml:42","Warn: pipCommand not pinned by hash: .github/workflows/pr_tests.yml:61","Warn: pipCommand not pinned by hash: .github/workflows/pr_tests.yml:62","Warn: pipCommand not pinned by hash: .github/workflows/pr_tests_gpu.yml:42","Warn: pipCommand not pinned by hash: .github/workflows/pr_tests_gpu.yml:43","Warn: pipCommand not pinned by hash: .github/workflows/pr_tests_gpu.yml:62","Warn: pipCommand not pinned by hash: .github/workflows/pr_tests_gpu.yml:63","Warn: pipCommand not pinned by hash: .github/workflows/pr_torch_dependency_test.yml:29","Warn: pipCommand not pinned by hash: .github/workflows/pypi_publish.yaml:54","Warn: pipCommand not pinned by hash: .github/workflows/pypi_publish.yaml:55","Warn: pipCommand not pinned by hash: .github/workflows/pypi_publish.yaml:56","Warn: pipCommand not pinned by hash: .github/workflows/pypi_publish.yaml:57","Warn: pipCommand not pinned by hash: .github/workflows/pypi_publish.yaml:70","Warn: pipCommand not pinned by hash: .github/workflows/pypi_publish.yaml:71","Warn: pipCommand not pinned by hash: .github/workflows/pypi_publish.yaml:28","Warn: pipCommand not pinned by hash: .github/workflows/stale.yml:27","Info:   0 out of 109 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  14 third-party GitHubAction dependencies pinned","Info:   0 out of   9 containerImage dependencies pinned","Info:   0 out of  36 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"104 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2020-73","Warn: Project is vulnerable to: PYSEC-2019-41 / GHSA-qfc5-mcwq-26q8","Warn: Project is vulnerable to: PYSEC-2019-217 / GHSA-462w-v97r-4m45","Warn: Project is vulnerable to: PYSEC-2014-8 / GHSA-8r7q-cvjq-x353","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: PYSEC-2014-82 / GHSA-fqh9-2qgg-h84h","Warn: Project is vulnerable to: PYSEC-2021-66 / GHSA-g3rq-g295-4j3m","Warn: Project is vulnerable to: GHSA-h5c8-rqwp-cp95","Warn: Project is vulnerable to: GHSA-h75v-3vvj-5mfj","Warn: Project is vulnerable to: PYSEC-2019-220 / GHSA-hj2j-77xm-mc5v","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-37mw-44qp-f5jm","Warn: Project is vulnerable to: GHSA-6rvg-6v2m-4j46","Warn: Project is vulnerable to: GHSA-9356-575x-2w9m","Warn: Project is vulnerable to: GHSA-fpwr-67px-3qhx","Warn: Project is vulnerable to: PYSEC-2024-229 / GHSA-hxxf-235m-72v3","Warn: Project is vulnerable to: GHSA-jjph-296x-mrcr","Warn: Project is vulnerable to: GHSA-phhr-52qp-3mj4","Warn: Project is vulnerable to: GHSA-q2wp-rjmx-x6x9","Warn: Project is vulnerable to: PYSEC-2025-40 / GHSA-qq3j-4f4f-9583","Warn: Project is vulnerable to: PYSEC-2024-227 / GHSA-qxrp-vhvm-j765","Warn: Project is vulnerable to: PYSEC-2024-228 / GHSA-wrfc-pvp9-mr9g","Warn: Project is vulnerable to: GHSA-3749-ghw9-m3mg","Warn: Project is vulnerable to: PYSEC-2022-43015 / GHSA-47fc-vmwq-366v","Warn: Project is vulnerable to: PYSEC-2025-41 / GHSA-53q9-r3pm-6pq6","Warn: Project is vulnerable to: PYSEC-2024-252 / GHSA-5pcm-hx3q-hm94","Warn: Project is vulnerable to: GHSA-887c-mr87-cxwp","Warn: Project is vulnerable to: PYSEC-2024-251 / GHSA-pg7h-5qx3-wjr3","Warn: Project is vulnerable to: PYSEC-2024-250","Warn: Project is vulnerable to: PYSEC-2024-259","Warn: Project is vulnerable to: PYSEC-2023-299 / GHSA-282v-666c-3fvg","Warn: Project is vulnerable to: GHSA-37q5-v5qm-c9v8","Warn: Project is vulnerable to: PYSEC-2023-300 / GHSA-3863-2447-669p","Warn: Project is vulnerable to: PYSEC-2023-301 / GHSA-v68g-wm8c-6x7j","Warn: Project is vulnerable to: GHSA-489j-g2vx-39wf","Warn: Project is vulnerable to: PYSEC-2018-34 / GHSA-2fc2-6r4j-p65h","Warn: Project is vulnerable to: PYSEC-2021-856 / GHSA-5545-2q6w-2gh6","Warn: Project is vulnerable to: PYSEC-2019-108 / GHSA-9fq2-x9r6-wfmf","Warn: Project is vulnerable to: PYSEC-2018-33 / GHSA-cw6w-4rcx-xphc","Warn: Project is vulnerable to: PYSEC-2021-857 / GHSA-f7c7-j99h-c22f","Warn: Project is vulnerable to: GHSA-fpfv-jqm9-f5jm","Warn: Project is vulnerable to: PYSEC-2017-1 / GHSA-frgw-fgh6-9g52","Warn: Project is vulnerable to: GHSA-3c5c-7235-994j","Warn: Project is vulnerable to: GHSA-3f63-hfp8-52jq","Warn: Project is vulnerable to: PYSEC-2021-41 / GHSA-3wvg-mj6g-m9cv","Warn: Project is vulnerable to: PYSEC-2020-77 / GHSA-3xv8-3j54-hgrp","Warn: Project is vulnerable to: PYSEC-2020-80 / GHSA-43fq-w8qq-v88h","Warn: Project is vulnerable to: GHSA-44wm-f244-xhp3","Warn: Project is vulnerable to: GHSA-4fx9-vc88-q2xc","Warn: Project is vulnerable to: PYSEC-2021-35 / GHSA-57h3-9rgr-c24m","Warn: Project is vulnerable to: PYSEC-2020-172 / GHSA-5gm3-px64-rw72","Warn: Project is vulnerable to: PYSEC-2021-331 / GHSA-7534-mm45-c74v","Warn: Project is vulnerable to: PYSEC-2021-92 / GHSA-7r7m-5h27-29hp","Warn: Project is vulnerable to: PYSEC-2020-78 / GHSA-8843-m7mw-mxqm","Warn: Project is vulnerable to: PYSEC-2023-227 / GHSA-8ghj-p4vj-mr35","Warn: Project is vulnerable to: PYSEC-2014-87 / GHSA-8m9x-pxwq-j236","Warn: Project is vulnerable to: PYSEC-2022-10 / GHSA-8vj2-vxx3-667w","Warn: Project is vulnerable to: PYSEC-2021-36 / GHSA-8xjq-8fcg-g5hw","Warn: Project is vulnerable to: PYSEC-2016-6 / GHSA-8xjv-v9xq-m5h9","Warn: Project is vulnerable to: PYSEC-2021-42 / GHSA-95q3-8gr9-gm8w","Warn: Project is vulnerable to: PYSEC-2022-168 / GHSA-9j59-75qj-795w","Warn: Project is vulnerable to: PYSEC-2014-10 / GHSA-cfmr-38g9-f2h7","Warn: Project is vulnerable to: PYSEC-2020-76 / GHSA-cqhg-xjhh-p8hf","Warn: Project is vulnerable to: PYSEC-2021-40 / GHSA-f4w8-cv6p-x6r5","Warn: Project is vulnerable to: PYSEC-2021-69 / GHSA-f5g8-5qq7-938w","Warn: Project is vulnerable to: PYSEC-2021-139 / GHSA-g6rj-rv7j-xwp4","Warn: Project is vulnerable to: PYSEC-2015-16 / GHSA-h5rf-vgqx-wjv2","Warn: Project is vulnerable to: PYSEC-2016-5 / GHSA-hggx-3h72-49ww","Warn: Project is vulnerable to: PYSEC-2020-84 / GHSA-hj69-c76v-86wr","Warn: Project is vulnerable to: PYSEC-2016-7 / GHSA-hvr8-466p-75rh","Warn: Project is vulnerable to: PYSEC-2015-15 / GHSA-j6f7-g425-4gmx","Warn: Project is vulnerable to: GHSA-j7hp-h8jx-5ppr","Warn: Project is vulnerable to: PYSEC-2019-110 / GHSA-j7mj-748x-7p78","Warn: Project is vulnerable to: GHSA-jgpv-4h4c-xhw3","Warn: Project is vulnerable to: PYSEC-2022-42979 / GHSA-m2vv-5vj5-2hm7","Warn: Project is vulnerable to: PYSEC-2021-37 / GHSA-mvg9-xffr-p774","Warn: Project is vulnerable to: PYSEC-2020-83 / GHSA-p49h-hjvm-jg3h","Warn: Project is vulnerable to: PYSEC-2022-8 / GHSA-pw3c-h7wp-cvhx","Warn: Project is vulnerable to: PYSEC-2021-93 / GHSA-q5hq-fp76-qmrc","Warn: Project is vulnerable to: PYSEC-2020-82 / GHSA-r7rm-8j6h-r933","Warn: Project is vulnerable to: PYSEC-2014-23 / GHSA-r854-96gq-rfg3","Warn: Project is vulnerable to: PYSEC-2016-8 / GHSA-rwr3-c2q8-gm56","Warn: Project is vulnerable to: PYSEC-2020-81 / GHSA-vcqg-3p29-xw73","Warn: Project is vulnerable to: PYSEC-2020-79 / GHSA-vj42-xq3r-hr3r","Warn: Project is vulnerable to: PYSEC-2021-70 / GHSA-vqcj-wrf2-7v73","Warn: Project is vulnerable to: PYSEC-2016-9 / GHSA-w4vg-rf63-f3j3","Warn: Project is vulnerable to: PYSEC-2014-22 / GHSA-x895-2wrm-hvp7","Warn: Project is vulnerable to: PYSEC-2022-9 / GHSA-xrcv-f9gm-v42c","Warn: Project is vulnerable to: PYSEC-2021-137","Warn: Project is vulnerable to: PYSEC-2021-138","Warn: Project is vulnerable to: PYSEC-2021-317","Warn: Project is vulnerable to: PYSEC-2021-38","Warn: Project is vulnerable to: PYSEC-2021-39","Warn: Project is vulnerable to: PYSEC-2021-94","Warn: Project is vulnerable to: PYSEC-2023-175","Warn: Project is vulnerable to: PYSEC-2017-74","Warn: Project is vulnerable to: PYSEC-2019-156 / GHSA-xp76-357g-9wqq","Warn: Project is vulnerable to: PYSEC-2023-102","Warn: Project is vulnerable to: PYSEC-2023-114","Warn: Project is vulnerable to: PYSEC-2024-109 / GHSA-8cp5-3rf8-8gfh","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-19T14:15:32.542Z","repository_id":37080475,"created_at":"2025-08-19T14:15:32.542Z","updated_at":"2025-08-19T14:15:32.542Z"},"funding_links":[],"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":349647599,"owners_count":38573528,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-11-03T11:36:44.738Z","status":"online","status_checked_at":"2026-11-04T02:00:07.505Z","response_time":52,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"huggingface","name":"Hugging Face","uuid":"25720743","kind":"organization","description":"The AI community building the future.","email":null,"website":"https://huggingface.co/","location":"NYC + Paris","twitter":"huggingface","company":null,"icon_url":"https://avatars.githubusercontent.com/u/25720743?v=4","repositories_count":479,"last_synced_at":"2026-10-30T11:08:09.009Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/huggingface","funding_links":[],"total_stars":740360,"followers":70266,"following":0,"created_at":"2022-11-02T16:28:23.192Z","updated_at":"2026-10-30T11:08:09.027Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/huggingface","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/huggingface/repositories"},"tags":[{"name":"v0.42.1","sha":"2a1433913c7044f34fa4767dd84b28bba0bb0ecf","kind":"tag","published_at":"2026-10-27T07:18:12.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.42.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.42.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.42.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.42.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.42.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.42.1"},{"name":"v0.42.0","sha":"95f9b8925c34469ccac829866d7ad4e3fca1bd89","kind":"tag","published_at":"2026-10-23T15:28:39.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.42.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.42.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.42.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.42.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.42.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.42.0"},{"name":"v0.41.0","sha":"086bf9578c0f4acbc66e48cd1e7cc26befd9e10f","kind":"tag","published_at":"2026-10-06T06:20:53.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.41.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.41.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.41.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.41.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.41.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.41.0"},{"name":"v0.40.0","sha":"d035dcd7cc7c88e0a154609b62887d50bba9fdc2","kind":"tag","published_at":"2026-08-20T14:27:24.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.40.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.40.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.40.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.40.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.40.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.40.0"},{"name":"v0.39.0","sha":"a3608b512ed7248499a44c61d954965ed9bdae4d","kind":"tag","published_at":"2026-07-03T08:45:32.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.39.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.39.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.39.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.39.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.39.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.39.0"},{"name":"v0.38.0","sha":"275869dcae4ebcfee6a80253fdabc56033335020","kind":"tag","published_at":"2026-05-01T05:38:16.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.38.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.38.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.38.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.38.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.38.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.38.0"},{"name":"v0.37.1","sha":"ad3a3afc3a4d3068bbb12f58129c855087ffc6d6","kind":"tag","published_at":"2026-03-25T08:00:51.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.37.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.37.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.37.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.37.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.37.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.37.1"},{"name":"v0.37.0","sha":"d791c5c024014784df4a8dac2601e19fb4d300fc","kind":"tag","published_at":"2026-03-05T14:50:38.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.37.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.37.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.37.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.37.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.37.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.37.0"},{"name":"v0.36.0","sha":"9380e58821092ad05e618fa8a259030136ba43c0","kind":"tag","published_at":"2025-12-08T10:02:45.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.36.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.36.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.36.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.36.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.36.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.36.0"},{"name":"v0.35.2","sha":"b71269675ec1b85193107a691dd35c308e46f0a5","kind":"tag","published_at":"2025-10-15T03:55:42.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.35.2","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.35.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.35.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.35.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.35.2/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.35.2"},{"name":"v0.35.1","sha":"0f252be0ed42006c125ef4429156cb13ae6c1d60","kind":"tag","published_at":"2025-08-20T04:12:27.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.35.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.35.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.35.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.35.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.35.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.35.1"},{"name":"v0.35.0","sha":"f27949dad9f88a34eb22ff80956bbbb940cdbd2b","kind":"tag","published_at":"2025-08-19T03:04:55.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.35.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.35.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.35.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.35.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.35.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.35.0"},{"name":"v0.34.0","sha":"50dea89dc6036e71a00bc3d57ac062a80206d9eb","kind":"tag","published_at":"2025-06-24T14:53:14.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.34.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.34.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.34.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.34.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.34.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.34.0"},{"name":"v0.33.1","sha":"375ec930863ee74d0a0d5209f5627a5c89c752c2","kind":"tag","published_at":"2025-04-10T02:45:19.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.33.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.33.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.33.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.33.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.33.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.33.1"},{"name":"v0.33.0","sha":"a2ed6b452631d30ed23f45ea5fb7f5995c6dc613","kind":"tag","published_at":"2025-04-09T13:21:00.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.33.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.33.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.33.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.33.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.33.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.33.0"},{"name":"v0.32.2","sha":"560fb5f4d65b8593c13e4be50a59b1fd9c2d9992","kind":"tag","published_at":"2025-01-15T14:13:06.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.32.2","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.32.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.32.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.32.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.32.2/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.32.2"},{"name":"v0.32.1","sha":"e8aacda762e311505ba05ae340af23b149e37af3","kind":"tag","published_at":"2024-12-25T12:19:04.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.32.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.32.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.32.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.32.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.32.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.32.1"},{"name":"v0.32.0","sha":"cd4d0d8ffba6a434344c8836f3eebda96e5c49fe","kind":"tag","published_at":"2024-12-23T15:48:35.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.32.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.32.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.32.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.32.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.32.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.32.0"},{"name":"v0.31.0","sha":"89e4d6219805975bd7d253a267e1951badc9f1c0","kind":"tag","published_at":"2024-10-22T14:12:13.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.31.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.31.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.31.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.31.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.31.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.31.0"},{"name":"v0.30.3","sha":"c9ff360966327ace3faad3807dc871a4e5447501","kind":"tag","published_at":"2024-09-17T05:38:40.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.30.3","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.30.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.30.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.30.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.30.3/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.30.3"},{"name":"v0.30.2","sha":"f63c12633f154c2a1d79c17f4238fb073133652c","kind":"tag","published_at":"2024-08-31T00:03:28.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.30.2","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.30.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.30.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.30.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.30.2/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.30.2"},{"name":"v0.30.1","sha":"8b9bfaea80be902c6d81f60a192d58b8fbbc329f","kind":"tag","published_at":"2024-08-24T04:56:32.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.30.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.30.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.30.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.30.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.30.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.30.1"},{"name":"v0.30.0","sha":"8a79d8ec3973e78065f13638eefc0dc7d4dc6009","kind":"tag","published_at":"2024-08-07T07:31:47.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.30.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.30.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.30.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.30.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.30.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.30.0"},{"name":"v0.29.2","sha":"c586aadef6bb66d355fa40a2b95a0bea8a6fe79c","kind":"tag","published_at":"2024-06-27T03:56:54.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.29.2","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.29.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.29.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.29.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.29.2/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.29.2"},{"name":"v0.29.1","sha":"a0a542702869f963baeea63847f17a3145ca2287","kind":"commit","published_at":"2024-06-20T21:10:11.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.29.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.29.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.29.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.29.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.29.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.29.1"},{"name":"v0.29.0","sha":"39aa3909e8e2dfe30f4807aedaadf42c1d8b1a8f","kind":"tag","published_at":"2024-06-12T20:12:30.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.29.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.29.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.29.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.29.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.29.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.29.0"},{"name":"v0.28.2","sha":"de9528ebc7725012cf097e43f565aeff24940eda","kind":"tag","published_at":"2024-06-04T20:11:53.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.28.2","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.28.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.28.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.28.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.28.2/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.28.2"},{"name":"v0.28.1","sha":"0091f08a1a44dc92e3f63c51b48d42feca85c66e","kind":"tag","published_at":"2024-06-04T10:28:01.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.28.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.28.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.28.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.28.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.28.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.28.1"},{"name":"v0.28.0","sha":"7828d4eb003ae493ef677aaad411e36fafe27edc","kind":"tag","published_at":"2024-05-27T11:55:42.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.28.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.28.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.28.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.28.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.28.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.28.0"},{"name":"v0.27.2","sha":"b69fd990ad8026f21893499ab396d969b62bb8cc","kind":"tag","published_at":"2024-03-20T01:40:38.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.27.2","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.27.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.27.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.27.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.27.2/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.27.2"},{"name":"v0.27.1","sha":"d7634cca87641897baf90f5a006f2d6d16eac6ec","kind":"tag","published_at":"2024-03-19T03:54:34.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.27.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.27.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.27.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.27.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.27.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.27.1"},{"name":"v0.27.0","sha":"cfa7c0a93df3384685ec927c6c67d0e8a91d862a","kind":"tag","published_at":"2024-03-14T15:41:43.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.27.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.27.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.27.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.27.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.27.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.27.0"},{"name":"v0.26.3","sha":"66f94eaa0c68a893b2aba1ec9f79ee7890786fba","kind":"tag","published_at":"2024-02-13T08:31:46.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.26.3","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.26.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.26.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.26.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.26.3/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.26.3"},{"name":"v0.26.2","sha":"7d52558c156cff8a88003ab164d9e0f30740a855","kind":"tag","published_at":"2024-02-06T02:07:09.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.26.2","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.26.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.26.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.26.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.26.2/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.26.2"},{"name":"v0.26.1","sha":"08e6558ab8f0cb25af1ffb8f4cef7c8c68fa6bd5","kind":"tag","published_at":"2024-02-02T09:13:11.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.26.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.26.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.26.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.26.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.26.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.26.1"},{"name":"v0.26.0","sha":"674d43fd68161880c5f8efd11a95c6b1d3012d9a","kind":"tag","published_at":"2024-01-31T22:18:21.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.26.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.26.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.26.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.26.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.26.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.26.0"},{"name":"v0.25.1","sha":"1909952826ffb0609f5df172ac7948c46422614d","kind":"tag","published_at":"2024-01-17T16:17:18.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.25.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.25.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.25.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.25.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.25.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.25.1"},{"name":"v0.25.0","sha":"7f551e29ff4ad05615cb38530a8940811f9e5936","kind":"tag","published_at":"2023-12-27T13:33:55.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.25.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.25.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.25.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.25.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.25.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.25.0"},{"name":"v0.24.0","sha":"76c645d3a641c879384afcb43496f0b7db8cc5cb","kind":"tag","published_at":"2023-11-29T18:58:52.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.24.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.24.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.24.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.24.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.24.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.24.0"},{"name":"v0.23.1","sha":"4719b8f5f9714f1c0b3fd32addaf0f61a9939219","kind":"tag","published_at":"2023-11-16T14:44:18.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.23.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.23.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.23.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.23.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.23.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.23.1"},{"name":"v0.23.0","sha":"fbb8b34716d98a2192c3dc7c063a4c947cae9bae","kind":"tag","published_at":"2023-11-09T16:26:09.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.23.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.23.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.23.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.23.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.23.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.23.0"},{"name":"v0.22.3","sha":"482a9dd36a7de5a4a82dde3452981165412f6d3a","kind":"tag","published_at":"2023-11-08T12:25:17.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.22.3","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.22.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.22.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.22.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.22.3/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.22.3"},{"name":"v0.22.2","sha":"249c06c12f72a0d58a9df63e4c3b9c51c229ca1b","kind":"tag","published_at":"2023-11-07T17:38:59.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.22.2","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.22.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.22.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.22.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.22.2/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.22.2"},{"name":"v0.22.1","sha":"a1d33fc9a5b188b54991604465a0bc374c3ad59a","kind":"tag","published_at":"2023-11-06T14:42:23.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.22.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.22.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.22.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.22.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.22.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.22.1"},{"name":"v0.22.0","sha":"df60b35e4747c6fba196922de42a383ec0e82c06","kind":"tag","published_at":"2023-11-06T12:51:48.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.22.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.22.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.22.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.22.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.22.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.22.0"},{"name":"v0.21.4","sha":"f5942649f522f0ae87bcb659735b9fd894349ca8","kind":"tag","published_at":"2023-09-29T15:41:28.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.21.4","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.21.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.21.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.21.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.21.4/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.21.4"},{"name":"v0.21.3","sha":"9858053bfeb61ba8e7bbecc9d30defab825cbcaf","kind":"tag","published_at":"2023-09-27T16:41:16.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.21.3","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.21.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.21.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.21.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.21.3/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.21.3"},{"name":"v0.21.2","sha":"813a1b2ee01170d1c97870ef1d5f5922bbcb6b63","kind":"tag","published_at":"2023-09-18T22:10:00.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.21.2","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.21.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.21.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.21.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.21.2/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.21.2"},{"name":"v0.21.1","sha":"60ab8fad1654f7427926223e2207660b13334f0e","kind":"tag","published_at":"2023-09-14T11:07:34.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.21.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.21.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.21.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.21.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.21.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.21.1"},{"name":"v0.21.0","sha":"29f15673ed5c14e4843d7c837890910207f72129","kind":"tag","published_at":"2023-09-13T13:59:38.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.21.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.21.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.21.0"},{"name":"v0.20.2","sha":"6fc8aff521590418576b698a8be1d276018367da","kind":"tag","published_at":"2023-08-31T18:40:00.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.20.2","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.20.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.20.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.20.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.20.2/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.20.2"},{"name":"v0.20.1","sha":"9b93b6cb543ce62a132301b3a4d9ac520e7a0754","kind":"tag","published_at":"2023-08-28T04:04:41.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.20.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.20.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.20.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.20.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.20.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.20.1"},{"name":"v0.20.0","sha":"e3380c02cf177a8027efea5d233afa9abb1870da","kind":"tag","published_at":"2023-08-17T08:18:34.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.20.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.20.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.20.0"},{"name":"v0.19.3","sha":"de9c72d58c3eb4bcd50901d0c23c7c46f0cec29b","kind":"tag","published_at":"2023-07-30T10:03:35.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.19.3","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.19.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.19.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.19.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.19.3/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.19.3"},{"name":"v0.19.2","sha":"965e52ce611108559a0ebab75c8b421d1229c5ab","kind":"tag","published_at":"2023-07-28T18:04:28.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.19.2","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.19.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.19.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.19.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.19.2/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.19.2"},{"name":"v0.19.1","sha":"aa4634a7fa5002635ac12f4fe4ebfff34691d652","kind":"tag","published_at":"2023-07-27T18:31:37.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.19.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.19.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.19.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.19.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.19.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.19.1"},{"name":"v0.19.0","sha":"ef9824f9f79dbe0096df6797af274b316f1c4970","kind":"tag","published_at":"2023-07-26T19:04:20.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.19.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.19.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.19.0"},{"name":"v0.18.2","sha":"5e80827369272f4b24af51573466aba24454b068","kind":"tag","published_at":"2023-07-11T16:55:06.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.18.2","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.18.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.18.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.18.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.18.2/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.18.2"},{"name":"v0.18.1","sha":"1c0f6bb2cfbeacb2b6ac902db7d2f5fce4d342f1","kind":"tag","published_at":"2023-07-07T14:54:26.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.18.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.18.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.18.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.18.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.18.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.18.1"},{"name":"v0.18.0","sha":"6fc169c3eee97f3eb8de43155a454b9dd0499dd3","kind":"tag","published_at":"2023-07-06T17:30:28.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.18.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.18.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.18.0"},{"name":"v0.17.1","sha":"afcca3916fafccff1419c45f3de00be57db12dfc","kind":"tag","published_at":"2023-06-12T12:04:38.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.17.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.17.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.17.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.17.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.17.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.17.1"},{"name":"v0.17.0","sha":"6bbde99c4ac3cfaae3973ef6413e0cf9a8189ddb","kind":"tag","published_at":"2023-06-08T14:55:32.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.17.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.17.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.17.0"},{"name":"v0.17.0.rc0","sha":"43075d89b5adea4169df988036bc8a49ef025d26","kind":"tag","published_at":"2023-06-07T10:32:22.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.17.0.rc0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.17.0.rc0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.17.0.rc0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.17.0.rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.17.0.rc0/manifests","release_url":null},{"name":"v0.16.1","sha":"9b14ce397e53fc5f5b909b07b6e992a2afe8e3af","kind":"tag","published_at":"2023-04-28T12:05:11.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.16.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.16.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.16.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.16.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.16.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.16.1"},{"name":"v0.16.0","sha":"6ba0efb9a188b08f5b46565a87c0b3da7ff46af4","kind":"tag","published_at":"2023-04-26T11:35:18.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.16.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.16.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.16.0"},{"name":"v0.15.1","sha":"92bf23aee537ea97759ed00d94541fea62536a82","kind":"tag","published_at":"2023-04-17T16:28:21.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.15.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.15.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.15.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.15.1"},{"name":"v0.15.0","sha":"e7534542a2e736ab54328a7fb3a0a15fe4f31da2","kind":"tag","published_at":"2023-04-12T15:15:55.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.15.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.15.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.15.0"},{"name":"v0.14.0","sha":"f20c8f5a1aba27f5972cad50516f18ba516e4d9e","kind":"tag","published_at":"2023-03-03T15:45:22.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.14.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.14.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.14.0"},{"name":"v0.13.1","sha":"8e44aa4b9ff3b774fa4df6f998e1b3c5cebce8a2","kind":"tag","published_at":"2023-02-20T07:40:23.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.13.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.13.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.13.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.13.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.13.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.13.1"},{"name":"v0.13.0","sha":"b2c1e0d6d4ffbd93fc0c381e5b9cdf316ca4f99f","kind":"tag","published_at":"2023-02-17T21:38:10.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.13.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.13.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.13.0"},{"name":"v0.12.1","sha":"374ec161707c5a6a6abdaa6a87117fba0e8d58d4","kind":"tag","published_at":"2023-01-27T07:44:57.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.12.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.12.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.12.1"},{"name":"v0.12.0","sha":"180841bbde4b200be43350164eef80c93a68983a","kind":"tag","published_at":"2023-01-25T13:48:20.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.12.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.12.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.12.0"},{"name":"v0.11.1","sha":"f7bb9cae114575b5ce2b94c122332114a0def106","kind":"tag","published_at":"2022-12-20T16:25:21.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.11.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.11.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.11.1"},{"name":"v0.11.0","sha":"a5edb981a72ff9d516f3bea4e18b448ed0178751","kind":"tag","published_at":"2022-12-19T16:57:46.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.11.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.11.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.11.0"},{"name":"v0.10.2","sha":"0ca172407db4f0656395bae40ea5848f4918742b","kind":"tag","published_at":"2022-12-09T18:10:48.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.10.2","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.10.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.10.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.10.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.10.2/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.10.2"},{"name":"v0.10.1","sha":"5bc6cd57b925cda2f2055feb3f42778cf7f87c18","kind":"tag","published_at":"2022-12-09T14:07:00.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.10.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.10.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.10.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.10.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.10.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.10.1"},{"name":"v0.10.0","sha":"3faf204c496ffed9ad48862874db7031bbe2674e","kind":"tag","published_at":"2022-12-08T18:25:06.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.10.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.10.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.10.0"},{"name":"v0.9.0","sha":"6b02323a602a66841729c3a5d60844b24aa81ff2","kind":"tag","published_at":"2022-11-25T16:48:07.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.9.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.9.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.9.0"},{"name":"v0.8.1","sha":"3876b20b5f08ad2a87ba9c7c7e495c6d1ed7e62c","kind":"tag","published_at":"2022-11-23T23:57:22.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.8.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.8.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.8.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.8.1"},{"name":"v0.8.0","sha":"16a32c9dab03d41204120b63cdae71c40b279bdf","kind":"tag","published_at":"2022-11-23T18:12:49.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.8.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.8.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.8.0"},{"name":"v0.7.2","sha":"91592ed2a88f93b3b29f11020be351dd1f9d21ef","kind":"tag","published_at":"2022-11-05T21:29:27.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.7.2","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.7.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.7.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.7.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.7.2/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.7.2"},{"name":"v0.7.1","sha":"2ea5eebd7c6002f4dc083cf43e2553beed92defa","kind":"tag","published_at":"2022-11-04T14:18:11.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.7.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.7.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.7.1"},{"name":"v0.7.0","sha":"bde4880c9cceada20b387d3110061c65249dabcc","kind":"tag","published_at":"2022-11-03T18:01:44.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.7.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.7.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.7.0"},{"name":"v0.6.0","sha":"ad9d7ce4763f8fb2a9e620bff017830c26086c36","kind":"tag","published_at":"2022-10-19T15:39:18.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.6.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.6.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.6.0"},{"name":"v0.5.1","sha":"3538e03a3f0db3d59a71c347682fac544ed6351c","kind":"tag","published_at":"2022-10-13T19:08:50.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.5.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.5.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.5.1"},{"name":"v0.5.0","sha":"0679d090837ed6e67b73d64ec1bdc05ef832a140","kind":"tag","published_at":"2022-10-13T16:57:19.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.5.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.5.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.5.0"},{"name":"v0.4.2","sha":"b2c9b5469a06c577651811d2dcffabcd10b256ac","kind":"tag","published_at":"2022-10-11T22:29:33.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.4.2","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.4.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.4.2/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.4.2"},{"name":"v0.4.1","sha":"91ddd2a25b848df0fa1262d4f1cd98c7ccb87750","kind":"tag","published_at":"2022-10-07T08:40:09.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.4.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.4.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.4.1"},{"name":"v0.4.0","sha":"0fe59b679ea8dac5e389ac05807e0e6b1cb2aebd","kind":"tag","published_at":"2022-10-06T16:22:53.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.4.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.4.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.4.0"},{"name":"v0.3.0","sha":"3f55d1359fb7b93070d87c2afe9c453668249d45","kind":"tag","published_at":"2022-09-08T16:20:57.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.3.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.3.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.3.0"},{"name":"v0.2.4","sha":"60a147343f8931bb10d1a40e201b97ffee8978d4","kind":"tag","published_at":"2022-08-22T16:46:06.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.2.4","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.2.4/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.2.4"},{"name":"v0.2.3","sha":"ebd80e2618cb753b38740c0f30703c211407289a","kind":"tag","published_at":"2022-08-22T08:50:39.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.2.3","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.2.3/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.2.3"},{"name":"v0.2.2","sha":"4b02f53e626f091b86643b54a819b7ada81685c5","kind":"tag","published_at":"2022-08-16T17:30:50.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.2.2","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.2.2/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.2.2"},{"name":"v0.2.1","sha":"c1b378db69096e9118048b51e7a74822ed7380a6","kind":"tag","published_at":"2022-08-16T16:23:47.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.2.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.2.1/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.2.1"},{"name":"v0.2.0","sha":"ea2e177c1d578037cc6e2ece60a516a2ea237272","kind":"tag","published_at":"2022-08-16T15:40:30.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.2.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.2.0/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/v0.2.0"},{"name":"0.1.3","sha":"b6cadcef98f4fa5b3b55ab97d9d0d27068f0b345","kind":"tag","published_at":"2022-07-28T08:28:36.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/0.1.3","html_url":"https://github.com/huggingface/diffusers/releases/tag/0.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@0.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/0.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/0.1.3/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/0.1.3"},{"name":"0.1.2","sha":"5311f564ed1e1247f83d83533059006845071463","kind":"tag","published_at":"2022-07-21T12:52:14.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/0.1.2","html_url":"https://github.com/huggingface/diffusers/releases/tag/0.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@0.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/0.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/0.1.2/manifests","release_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/releases/0.1.2"},{"name":"0.1.1","sha":"4293b9f54f26b21fc71cae3ccc8cf168f82f218b","kind":"tag","published_at":"2022-07-21T02:51:56.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/0.1.1","html_url":"https://github.com/huggingface/diffusers/releases/tag/0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/0.1.1/manifests","release_url":null},{"name":"0.1.0","sha":"0e5f2daee7b8736cf02c5e8789982432cf3e201c","kind":"tag","published_at":"2022-07-21T02:35:50.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/0.1.0","html_url":"https://github.com/huggingface/diffusers/releases/tag/0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/0.1.0/manifests","release_url":null},{"name":"v0.0.4","sha":"611163405f354dae60f32b2685a66087473f44a7","kind":"tag","published_at":"2022-06-15T14:22:00.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.0.4","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.0.4/manifests","release_url":null},{"name":"v0.0.3","sha":"57a70b809ec1ab14f152f37347a9ac8802e92f3f","kind":"tag","published_at":"2022-06-15T13:54:51.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.0.3","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.0.3/manifests","release_url":null},{"name":"v0.0.2","sha":"23a71cf184044f8f8f4ae1576598df14ce0518d5","kind":"tag","published_at":"2022-06-07T17:34:39.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.0.2","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.0.2/manifests","release_url":null}]},"repo_metadata_updated_at":"2026-11-04T12:47:44.410Z","dependent_packages_count":187,"downloads":4970946,"downloads_period":"last-month","dependent_repos_count":5162,"rankings":{"downloads":0.24155344663154107,"dependent_repos_count":0.14207876674848735,"dependent_packages_count":0.211275175655471,"stargazers_count":0.11022341739497506,"forks_count":0.09869295351855037,"docker_downloads_count":1.4119932458842106,"average":0.3693028343055393},"purl":"pkg:pypi/diffusers","advisories":[{"uuid":"GSA_kwCzR0hTQS03d3g0LTZ2ZmYtdjY0cM4ABXJo","url":"https://github.com/advisories/GHSA-7wx4-6vff-v64p","title":"Diffusers: TOCTOU Trust Remote Code Bypass","description":"## Background\n\nThis vulnerability is found in the `diffusers` package - the `transformers`-equivalent library for diffusion models.\n\nIt is found in the `DiffusionPipeline.from_pretrained` flow, which is used to load a pipeline from the HuggingFace Hub.\n\nThis function has a `trust_remote_code` guard: if the repository’s `model_index.json` references a custom pipeline class defined in a `.py` file in the repo, the load is blocked unless `trust_remote_code=True` is explicitly passed:\n\n```\nValueError: The repository for attacker/repo contains custom code in pipeline.py\nwhich must be executed to correctly load the model. You can inspect the repository\ncontent at https://hf.co/attacker/repo/blob/main/pipeline.py.\nPlease pass the argument `trust_remote_code=True` to allow custom code to be run.\n```\n\nThe vulnerability allows arbitrary code execution through the custom pipeline flow from a Hub repo, with no `custom_pipeline` or `trust_remote_code` kwargs passed. The `from_pretrained` call succeeds and returns a functional pipeline.\n\n---\n\n## Naive Flow\n\n`DiffusionPipeline.from_pretrained` begins by popping all relevant arguments from `kwargs` into local variables, then calls `DiffusionPipeline.download()` to fetch the repo files:\n\n```python\n# pipeline_utils.py:853\ncached_folder = cls.download(\n    pretrained_model_name_or_path,\n    ...\n    custom_pipeline=custom_pipeline,\n    trust_remote_code=trust_remote_code,\n    ...\n)\n```\n\nInside `download()`, `model_index.json` is fetched first as a standalone file via `hf_hub_download`:\n\n```python\n# pipeline_utils.py:1636\nconfig_file = hf_hub_download(\n    pretrained_model_name,\n    cls.config_name,\n    ...\n)\nconfig_dict = cls._dict_from_json_file(config_file)\n```\n\nThis config is used to detect custom pipeline code and enforce the trust check:\n\n```python\n# pipeline_utils.py:1672\nif custom_pipeline is None and isinstance(config_dict[\"_class_name\"], (list, tuple)):\n    custom_pipeline = config_dict[\"_class_name\"][0]\n\nload_pipe_from_hub = custom_pipeline is not None and f\"{custom_pipeline}.py\" in filenames\n\nif load_pipe_from_hub and not trust_remote_code:\n    raise ValueError(...)\n```\n\nAfter the check passes, `snapshot_download` then fetches all files and saves them to disk:\n\n```python\n# pipeline_utils.py:1778\ncached_folder = snapshot_download(\n    pretrained_model_name,\n    ...\n    revision=revision,\n    allow_patterns=allow_patterns,\n    ...\n)\n```\n\nBack in `from_pretrained`, the config is read a second time from the downloaded snapshot, and`_resolve_custom_pipeline_and_cls` reads the config to re-check if custom code needs to be loaded:\n\n```python\n# pipeline_loading_utils.py:974\ndef _resolve_custom_pipeline_and_cls(folder, config, custom_pipeline):\n    custom_class_name = None\n    if os.path.isfile(os.path.join(folder, f\"{custom_pipeline}.py\")):\n        custom_pipeline = os.path.join(folder, f\"{custom_pipeline}.py\")\n    elif isinstance(config[\"_class_name\"], (list, tuple)) and os.path.isfile(\n        os.path.join(folder, f\"{config['_class_name'][0]}.py\")\n    ):\n        custom_pipeline = os.path.join(folder, f\"{config['_class_name'][0]}.py\")\n        custom_class_name = config[\"_class_name\"][1]\n\n    return custom_pipeline, custom_class_name\n```\n\nIf the config points to a `.py` file, it is imported.\n\n---\n\n## The Vulnerability\n\n`hf_hub_download` and `snapshot_download` are two independent HTTP calls to the Hub, both resolving the repository’s default branch (if `revision=None`) to its current HEAD at call time. There is no atomicity guarantee between them - if the repository is updated between the two calls, they will resolve to different commits and download different content, with no warning displayed to the user.\n\nThe trust check in `download()` operates on the content fetched by `hf_hub_download` (commit A). The `snapshot_download` call that immediately follows can silently fetch a newer commit (commit B). The config in the newer commit will be the one parsed by `_resolve_custom_pipeline_and_cls`.\n\n**Therefore, it’s possible to introduce remote code into the repo between the two calls, bypassing the trust check.**\n\nThe race window is everything between the two Hub calls inside `download()`:\n\n```python\n# pipeline_utils.py:1636\nconfig_file = hf_hub_download(...)   # ← sees commit A, trust check passes\n\n# ... filenames processing, pattern building, pipeline_is_cached check ...\n# ~~~ ATTACKER PUSHES COMMIT B HERE ~~~\n\n# pipeline_utils.py:1778\ncached_folder = snapshot_download(...)  # ← sees commit B, downloads pipeline.py\n```\n\nFor the exploit, commit A carries a clean config with `_class_name` as a plain string, which causes `load_pipe_from_hub` to be `False` and the trust check to pass. Commit B changes `_class_name` to a list and adds `pipeline.py`:\n\n**Commit A - `model_index.json`:**\n\n```json\n{\n  \"_class_name\": \"FluxPipeline\",\n  \"_diffusers_version\": \"0.31.0\"\n}\n```\n\n**Commit B - `model_index.json`:**\n\n```json\n{\n  \"_class_name\": [\"pipeline\", \"FluxPipeline\"],\n  \"_diffusers_version\": \"0.31.0\"\n}\n```\n\nWhen `from_pretrained` reads the snapshot after `download()` returns, `config[\"_class_name\"]` is now a list, `pipeline.py` exists on disk (fetched by `snapshot_download`), and `_resolve_custom_pipeline_and_cls` resolves `custom_pipeline` to the local path of that file. `_get_pipeline_class` then imports it - with no trust check at this point in the code.\n\n---\n\n## PoC\n\n1. Create a Hub repo with commit A’s `model_index.json` (plain string `_class_name`).\n2. Run `DiffusionPipeline.from_pretrained(\"attacker/repo\")` with a breakpoint set at `pipeline_utils.py:1778` (the `snapshot_download` call). This is for the window to be large enough to manually respond to it.\n3. When execution pauses at the breakpoint, push commit B: update `model_index.json` to use a list `_class_name` and add `pipeline.py`.\n4. Resume execution.\n5. `snapshot_download` fetches commit B; `/tmp/pwned` is written during the subsequent `_get_pipeline_class` call.\n\n---\n\n## Constraints\n\n- Does not apply when `revision` is pinned to a specific commit hash - both Hub calls resolve to the same content.\n- Does not apply when loading from a local directory.\n- If all expected files are already present in the local HF cache, `download()` returns early before reaching `snapshot_download` (line 1767 early-return), closing the race window. The exploit therefore requires a first (or forced) download.\n\n---\n\n## Exploitability\n\nThe window between the two calls is very short. Local testing resulted in a window of approximately ~0.5 seconds for the attacker to push the change. This is, of course, unfeasible to accomplish for each and every new download. However, given a popular repo with many downloads per day, one may achieve **statistical success** by changing the repo’s state every once in a while or every few seconds, with some percentage of downloaders falling on the exact window. \n\n---\n\n## Impact\n\nThe vulnerability is a silent RCE - it allows arbitrary code to be loaded through the custom pipeline flow from a Hub repo, with no `custom_pipeline` or `trust_remote_code` kwargs. The `from_pretrained` call succeeds and returns a fully functional pipeline.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-05-20T15:31:33.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://github.com/huggingface/diffusers/security/advisories/GHSA-7wx4-6vff-v64p","https://nvd.nist.gov/vuln/detail/CVE-2026-45804","https://github.com/huggingface/diffusers/issues/13446","https://github.com/huggingface/diffusers/pull/13448","https://github.com/huggingface/diffusers/commit/a37f6f8394ac2a7ee8360c3abea811efe54512b1","https://github.com/huggingface/diffusers/releases/tag/v0.38.0","https://github.com/pypa/advisory-database/tree/main/vulns/diffusers/PYSEC-2026-2446.yaml","https://github.com/advisories/GHSA-7wx4-6vff-v64p"],"source_kind":"github","identifiers":["GHSA-7wx4-6vff-v64p","CVE-2026-45804"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-05-20T16:00:09.230Z","updated_at":"2026-10-28T20:04:58.503Z","epss_percentage":0.0037,"epss_percentile":0.30615,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03d3g0LTZ2ZmYtdjY0cM4ABXJo","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS03d3g0LTZ2ZmYtdjY0cM4ABXJo","packages":[{"ecosystem":"pypi","package_name":"diffusers","versions":[{"first_patched_version":"0.38.0","vulnerable_version_range":"\u003c 0.38.0"}],"purl":"pkg:pypi/diffusers"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03d3g0LTZ2ZmYtdjY0cM4ABXJo/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS05OGg5LTQ3OTgtNHE1ds4ABWYU","url":"https://github.com/advisories/GHSA-98h9-4798-4q5v","title":"Diffusers has a `trust_remote_code` bypass via `custom_pipeline` and local custom components","description":"### Impact\n\nA `trust_remote_code` bypass in `DiffusionPipeline.from_pretrained` allows arbitrary remote code execution despite the user passing `trust_remote_code=False` (or omitting it, which is the default). The vulnerability has three variants, all sharing the same root cause — the `trust_remote_code` gate was implemented inside `DiffusionPipeline.download()` rather than at the actual dynamic-module load site, so any code path that bypassed or short-circuited `download()` also bypassed the security check:\n\n1. **Cross-repo `custom_pipeline`.** `DiffusionPipeline.from_pretrained('repoA', custom_pipeline='attacker/repoB', trust_remote_code=False)` — the gate evaluated against `repoA`'s file list rather than `repoB`'s, so `repoB`'s `pipeline.py` was loaded and executed.\n2. **Local snapshot + Hub `custom_pipeline`.** `DiffusionPipeline.from_pretrained('/local/snapshot', custom_pipeline='attacker/repoB', trust_remote_code=False)` — the local-path branch never invoked `download()`, so the gate was never reached and remote code from `repoB` executed.\n3. **Local snapshot with custom components.** `DiffusionPipeline.from_pretrained('/local/snapshot', trust_remote_code=False)` where the snapshot contains custom component files (e.g. `unet/my_unet_model.py`) referenced from `model_index.json` — same root cause; the local path skipped `download()` and custom component code executed.\n\nSilent remote code execution on the victim's machine. Anyone calling `DiffusionPipeline.from_pretrained` with custom pipelines is impacted.\n\n### Patches\n\nYes. Fixed in **diffusers 0.38.0** via [PR #13448](https://github.com/huggingface/diffusers/pull/13448). All users on versions `\u003c 0.38.0` should upgrade:\n\n```bash\npip install --upgrade \"diffusers\u003e=0.38.0\"\n```\n\nThe fix moves the `trust_remote_code` gate out of `DiffusionPipeline.download()` and into `get_cached_module_file` in `src/diffusers/utils/dynamic_modules_utils.py`, which is the actual chokepoint for every dynamic module load (local, Hub, or community mirror). All three variants now raise `ValueError` instead of executing untrusted code.\n\n### Workarounds\n\nIf upgrading immediately is not possible:\n\n- Only call `from_pretrained` with `pretrained_model_name_or_path`, `custom_pipeline`, and local snapshot directories from fully trusted sources that have been audited.\n- Do not pass `custom_pipeline=` pointing at a Hub repository different from the primary `pretrained_model_name_or_path` before reading its `pipeline.py`.\n- Before calling `from_pretrained` on a local snapshot, inspect the snapshot for unexpected `*.py` files, especially under component subdirectories (`unet/`, `scheduler/`, etc.) and at the snapshot root.\n\nThese are mitigations, not fixes — the only complete remediation is upgrading to 0.38.0.\n\n### Resources\n\n- **Fix:** https://github.com/huggingface/diffusers/pull/13448\n- **Original issue:** https://github.com/huggingface/diffusers/issues/13446\n- **Release notes:** https://github.com/huggingface/diffusers/releases/tag/v0.38.0\n- **CWE-94:** https://cwe.mitre.org/data/definitions/94.html","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-05-07T05:31:17.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://github.com/huggingface/diffusers/security/advisories/GHSA-98h9-4798-4q5v","https://github.com/huggingface/diffusers/issues/13446","https://github.com/huggingface/diffusers/pull/13448","https://github.com/huggingface/diffusers/commit/a37f6f8394ac2a7ee8360c3abea811efe54512b1","https://github.com/huggingface/diffusers/releases/tag/v0.38.0","https://nvd.nist.gov/vuln/detail/CVE-2026-44513","https://github.com/pypa/advisory-database/tree/main/vulns/diffusers/PYSEC-2026-40.yaml","https://github.com/advisories/GHSA-98h9-4798-4q5v"],"source_kind":"github","identifiers":["GHSA-98h9-4798-4q5v","CVE-2026-44513"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-05-07T06:00:08.660Z","updated_at":"2026-10-28T20:05:20.088Z","epss_percentage":0.01071,"epss_percentile":0.64644,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05OGg5LTQ3OTgtNHE1ds4ABWYU","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS05OGg5LTQ3OTgtNHE1ds4ABWYU","packages":[{"ecosystem":"pypi","package_name":"diffusers","versions":[{"first_patched_version":"0.38.0","vulnerable_version_range":"\u003c 0.38.0"}],"purl":"pkg:pypi/diffusers"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05OGg5LTQ3OTgtNHE1ds4ABWYU/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1qN3c2LXZwdnEtajNnbc4ABWXu","url":"https://github.com/advisories/GHSA-j7w6-vpvq-j3gm","title":"Diffusers has a `trust_remote_code` bypass via `custom_pipeline` and local custom components","description":"## Background\n\nThis vulnerability is found in the `DiffusionPipeline.from_pretrained` flow, which is used to load a pipeline from the HuggingFace Hub.\n\nThis function accepts an optional `custom_pipeline` keyword argument: the name of a Python file in the repo that contains a custom class inheriting from `DiffusionPipeline`. An equivalent flow is triggered when the `_class_name` field in `model_index.json` (the repo config file) is set to a custom class.\n\nAny attempt to use a custom pipeline throws the following exception, requesting that `trust_remote_code` is also passed:\n\n```python\nDiffusionPipeline.from_pretrained(\n    pretrained_model_name_or_path='ido-shani/custom-pipeline',\n    custom_pipeline=\"custom\"\n)\n\nValueError: The repository for ido-shani/custom-pipeline contains custom code in\ncustom.py which must be executed to correctly load the model. You can inspect the\nrepository content at https://hf.co/ido-shani/custom-pipeline/blob/main/custom.py.\nPlease pass the argument `trust_remote_code=True` to allow custom code to be run.\n```\n\nThe vulnerability is a silent RCE - it allows arbitrary code to be loaded through the custom\\_pipeline flow from a Hub repo, with no `custom_pipeline` or `trust_remote_code` kwargs and nothing suspicious in the config. The `from_pretrained` call succeeds and returns a functional pipeline.\n\n## Naive Flow\n\nFirst, all relevant arguments are popped from kwargs and stored in local variables.\n\nGiven a `pretrained_model_name_or_path` that is a Hub repo ID, `DiffusionPipeline.download()` is called. This function serves two roles: it orchestrates downloading relevant model files, and it is the security gatekeeper for `trust_remote_code`. It is called even if the model is already cached; in that case it exits early. If the repo contains custom code, it checks whether `trust_remote_code` was passed and raises otherwise:\n\n```python\n# pipeline_utils.py:1645-1652\nload_pipe_from_hub = custom_pipeline is not None and f\"{custom_pipeline}.py\" in filenames\n\n...\n\nif load_pipe_from_hub and not trust_remote_code:\n    raise ValueError(...)\n```\n\nIt then runs `_get_pipeline_class`, which returns the class object of the pipeline in order to inspect its `__init__` signature and determine which component files need to be downloaded. As part of building the `allow_patterns` list used to filter the snapshot download to necessary files only, the custom pipeline file is explicitly included if present:\n\n```python\n# pipeline_utils.py:1707\nallow_patterns += [f\"{custom_pipeline}.py\"] if f\"{custom_pipeline}.py\" in filenames else []\n```\n\nThe function then checks if all expected files are already present, and either exits early or triggers a snapshot download with those patterns.\n\nThe next step in `from_pretrained` is loading the pipeline class a second time, this time to actually instantiate it. Before calling `_get_pipeline_class` again, `_resolve_custom_pipeline_and_cls` is called to translate the `custom_pipeline` name into a local path, since the files have already been downloaded:\n\n```python\n# pipeline_loading_utils.py:965-974\ndef _resolve_custom_pipeline_and_cls(folder, config, custom_pipeline):\n    custom_class_name = None\n    if os.path.isfile(os.path.join(folder, f\"{custom_pipeline}.py\")):\n        custom_pipeline = os.path.join(folder, f\"{custom_pipeline}.py\")\n    elif isinstance(config[\"_class_name\"], (list, tuple)) and os.path.isfile(\n        os.path.join(folder, f\"{config['_class_name'][0]}.py\")\n    ):\n        custom_pipeline = os.path.join(folder, f\"{config['_class_name'][0]}.py\")\n        custom_class_name = config[\"_class_name\"][1]\n\n    return custom_pipeline, custom_class_name\n```\n\nWhen `custom_class_name` is `None` (i.e. `custom_pipeline` was given as a kwarg rather than via the config), `_get_pipeline_class` will scan the file and automatically identify the class that subclasses `DiffusionPipeline`.\n\nOnce this is done, `_get_pipeline_class` is invoked with the resolved local path, which loads the custom code, retrieves the class object, and proceeds with instantiation.\n\n## The Vulnerability\n\n`_resolve_custom_pipeline_and_cls` receives `custom_pipeline` from the kwargs - when not supplied it defaults to `None`. That `None` is used in string formatting: `f\"{None}.py\"` = `\"None.py\"`.\n\n**If the repo contains a file with this name, it will be detected as a custom pipeline.**\n\nThis is only reached on the second invocation of `_get_pipeline_class` (inside `from_pretrained`, after `download()` returns). The trust\\_remote\\_code check lives entirely in `download()`, which evaluated `custom_pipeline is None -\u003e False` and skipped it. By the time `_resolve_custom_pipeline_and_cls` runs, it is no longer relevant.\n\nAs a bonus, `None.py` even gets downloaded automatically when the model isn't cached yet. This isn't strictly required - it is quite plausible that the victim has already run `hf download \u003cmodel\u003e` and has all files locally - but if they haven't, revisiting the `allow_patterns` line above shows it makes the same error: `f\"{None}.py\"` = `\"None.py\"` is added to `allow_patterns` and fetched.\n\nWhat should `None.py` contain? To avoid breaking the pipeline load, it must define a class inheriting from `DiffusionPipeline`. To avoid leaving suspicious clues in the config, that class should shadow one that already exists in diffusers. The following satisfies both requirements:\n\n```python\nfrom diffusers import FluxPipeline as _FluxPipeline\n\nclass FluxPipeline(_FluxPipeline):\n    pass\n\n# INSERT MALICIOUS CODE HERE\nimport pathlib\npathlib.Path(\"/tmp/pwned\").write_text(\":)\")\n```\n\nWith this, `model_index.json` can contain `\"_class_name\": \"FluxPipeline\"` - appearing to use the standard diffusers class - and the resulting pipeline is fully functional (it is also functional when running as a local directory). This has been verified against an extracted version of [DDUF/tiny-flux-dev-pipe-dduf](https://huggingface.co/DDUF/tiny-flux-dev-pipe-dduf).\n\nAll the attacker needs the victim to run is:\n\n```python\nfrom diffusers import DiffusionPipeline\n\npipeline = DiffusionPipeline.from_pretrained('ido-shani/none-py-trust-remote-code-bypass')\n```\n\n## PoC\n\n-   Upload this zip as a model to the hub. https://drive.google.com/file/d/1mULARMLJJUTCi57xIv0wtDauko-JW0h7/view?usp=sharing\n-   Run `DiffusionPipeline.from_pretrained` on the uploaded model hub identifier.\n-   RCE occured; `/tmp/pwned` was created. If you are running the exploit on windows, change the path touched in `None.py`.\n\n# Impact\n\nThe vulnerability is a silent RCE - it allows arbitrary code to be loaded through the custom\\_pipeline flow from a Hub repo, with no `custom_pipeline` or `trust_remote_code` kwargs and nothing suspicious in the config. The `from_pretrained` call succeeds and returns a functional pipeline.\n\n# Occurrences\n\nhttps://github.com/huggingface/diffusers/blob/e1b5db52bda85d47a4f8f75954f77e672a8f7f1c/src/diffusers/pipelines/pipeline_loading_utils.py#L976\n\n# Patches\n\nYes. Fixed in **diffusers 0.38.0** via [PR #13448](https://github.com/huggingface/diffusers/pull/13448). All users on versions `\u003c 0.38.0` should upgrade:\n\n```bash\npip install --upgrade \"diffusers\u003e=0.38.0\"\n```\n\nThe fix moves the `trust_remote_code` gate out of `DiffusionPipeline.download()` and into `get_cached_module_file` in `src/diffusers/utils/dynamic_modules_utils.py`, which is the actual chokepoint for every dynamic module load (local, Hub, or community mirror). All three variants now raise `ValueError` when trust_remote_code=False instead of executing untrusted code.  \n\n# Workarounds\n\nIf upgrading immediately is not possible:\n\n- Only call `from_pretrained` with `pretrained_model_name_or_path`, `custom_pipeline`, and local snapshot directories from sources you fully trust and have audited.\n- Do not pass `custom_pipeline=` pointing at a Hub repository different from the primary `pretrained_model_name_or_path` unless you have read its `pipeline.py`.\n- Before calling `from_pretrained` on a local snapshot, inspect the snapshot for unexpected `*.py` files, especially under component subdirectories (`unet/`, `scheduler/`, etc.) and at the snapshot root.\n\n# Why this should have a dedicated CVE\n\nGHSA-j7w6-vpvq-j3gm is a distinct defect from CVE-2026-44513. CVE-2026-44513 is a misplaced-security-gate bug requiring a user-supplied `custom_pipeline` argument or a config entry declaring custom code. GHSA-j7w6 is a string-formatting bug where the default custom_pipeline=None is interpolated into the filename `None.py`, allowing silent RCE on a fully default `from_pretrained('repo')` call with no kwargs and a `model_index.json` that shadows a legitimate class. The root cause root cause and trigger are different, although the fix applied to address CVE-2026-44513 also addresses this vulnerability.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-05-07T02:24:22.000Z","withdrawn_at":"2026-05-07T05:25:32.000Z","classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://github.com/huggingface/diffusers/security/advisories/GHSA-j7w6-vpvq-j3gm","https://github.com/huggingface/diffusers/pull/13448","https://github.com/huggingface/diffusers/commit/a37f6f8394ac2a7ee8360c3abea811efe54512b1","https://github.com/huggingface/diffusers/releases/tag/v0.38.0","https://nvd.nist.gov/vuln/detail/CVE-2026-44827","https://github.com/pypa/advisory-database/tree/main/vulns/diffusers/PYSEC-2026-41.yaml","https://github.com/advisories/GHSA-j7w6-vpvq-j3gm"],"source_kind":"github","identifiers":["GHSA-j7w6-vpvq-j3gm","CVE-2026-44827"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-05-07T03:00:08.861Z","updated_at":"2026-10-28T20:05:22.468Z","epss_percentage":0.00718,"epss_percentile":0.53579,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qN3c2LXZwdnEtajNnbc4ABWXu","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1qN3c2LXZwdnEtajNnbc4ABWXu","packages":[{"ecosystem":"pypi","package_name":"diffusers","versions":[{"first_patched_version":"0.38.0","vulnerable_version_range":"\u003c 0.38.0"}],"purl":"pkg:pypi/diffusers"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qN3c2LXZwdnEtajNnbc4ABWXu/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/pypi/diffusers","docker_dependents_count":385,"docker_downloads_count":312393,"usage_url":"https://repos.ecosyste.ms/usage/pypi/diffusers","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pypi/diffusers/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-11-03T15:10:28.320Z","issues_count":3529,"pull_requests_count":6584,"avg_time_to_close_issue":4029910.515638208,"avg_time_to_close_pull_request":1206515.2781909548,"issues_closed_count":2363,"pull_requests_closed_count":4974,"pull_request_authors_count":1110,"issue_authors_count":1856,"avg_comments_per_issue":4.21082459620289,"avg_comments_per_pull_request":3.5586269744835968,"merged_pull_requests_count":4093,"bot_issues_count":3,"bot_pull_requests_count":67,"past_year_issues_count":223,"past_year_pull_requests_count":641,"past_year_avg_time_to_close_issue":2756737.7291666665,"past_year_avg_time_to_close_pull_request":1849169.4210526317,"past_year_issues_closed_count":48,"past_year_pull_requests_closed_count":361,"past_year_pull_request_authors_count":203,"past_year_issue_authors_count":130,"past_year_avg_comments_per_issue":1.84304932735426,"past_year_avg_comments_per_pull_request":2.187207488299532,"past_year_bot_issues_count":3,"past_year_bot_pull_requests_count":36,"past_year_merged_pull_requests_count":232,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/issues","maintainers":[{"login":"sayakpaul","count":1298,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sayakpaul"},{"login":"DN6","count":454,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DN6"},{"login":"a-r-r-o-w","count":343,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/a-r-r-o-w"},{"login":"yiyixuxu","count":277,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yiyixuxu"},{"login":"stevhliu","count":200,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/stevhliu"},{"login":"hlky","count":199,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hlky"},{"login":"patrickvonplaten","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/patrickvonplaten"},{"login":"asomoza","count":71,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/asomoza"},{"login":"linoytsaban","count":59,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/linoytsaban"},{"login":"pcuenca","count":26,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pcuenca"},{"login":"patil-suraj","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/patil-suraj"},{"login":"apolinario","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/apolinario"},{"login":"SunMarc","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/SunMarc"},{"login":"dg845","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dg845"},{"login":"BenjaminBossan","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/BenjaminBossan"},{"login":"Wauplin","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wauplin"},{"login":"McPatate","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/McPatate"},{"login":"hanouticelina","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hanouticelina"},{"login":"radames","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/radames"},{"login":"osanseviero","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/osanseviero"},{"login":"albertvillanova","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/albertvillanova"},{"login":"qgallouedec","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/qgallouedec"},{"login":"davidberenstein1957","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/davidberenstein1957"},{"login":"anton-l","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/anton-l"},{"login":"XciD","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/XciD"},{"login":"mfuntowicz","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mfuntowicz"},{"login":"abidlabs","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/abidlabs"},{"login":"stas00","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/stas00"},{"login":"lhoestq","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lhoestq"},{"login":"bradtumy","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradtumy"},{"login":"alex216","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alex216"},{"login":"Vaibhavs10","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Vaibhavs10"},{"login":"tippmar-nr","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tippmar-nr"},{"login":"Abdennacer-Badaoui","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Abdennacer-Badaoui"},{"login":"vivid-planet-bot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vivid-planet-bot"},{"login":"gjedeer","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gjedeer"},{"login":"ad3002","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ad3002"},{"login":"coyotte508","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/coyotte508"},{"login":"jbw976","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jbw976"},{"login":"davanstrien","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/davanstrien"}],"active_maintainers":[{"login":"sayakpaul","count":116,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sayakpaul"},{"login":"yiyixuxu","count":48,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yiyixuxu"},{"login":"DN6","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DN6"},{"login":"stevhliu","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/stevhliu"},{"login":"dg845","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dg845"},{"login":"apolinario","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/apolinario"},{"login":"asomoza","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/asomoza"},{"login":"linoytsaban","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/linoytsaban"},{"login":"mfuntowicz","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mfuntowicz"},{"login":"Wauplin","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wauplin"},{"login":"Abdennacer-Badaoui","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Abdennacer-Badaoui"},{"login":"coyotte508","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/coyotte508"},{"login":"davanstrien","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/davanstrien"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/diffusers/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/diffusers/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/diffusers/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/diffusers/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/diffusers/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/diffusers/codemeta","maintainers":[{"uuid":"lysandre","login":"lysandre","name":null,"email":null,"url":null,"packages_count":13,"html_url":"https://pypi.org/user/lysandre/","role":null,"created_at":"2022-12-09T18:51:42.769Z","updated_at":"2022-12-09T18:51:42.769Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/lysandre/packages"},{"uuid":"spsayakpaul","login":"spsayakpaul","name":null,"email":null,"url":null,"packages_count":5,"html_url":"https://pypi.org/user/spsayakpaul/","role":"Maintainer","created_at":"2023-07-30T10:21:27.719Z","updated_at":"2023-07-30T10:21:27.719Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/spsayakpaul/packages"},{"uuid":"yiyixu","login":"yiyixu","name":null,"email":null,"url":null,"packages_count":2,"html_url":"https://pypi.org/user/yiyixu/","role":"Owner","created_at":"2024-08-19T14:14:02.525Z","updated_at":"2024-08-19T14:14:02.525Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/yiyixu/packages"},{"uuid":"DN6","login":"DN6","name":null,"email":null,"url":null,"packages_count":1,"html_url":"https://pypi.org/user/DN6/","role":"Maintainer","created_at":"2024-08-19T14:14:02.775Z","updated_at":"2024-08-19T14:14:02.775Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/DN6/packages"}]}