From: mmaitre314 <github.com/mmaitre314>Newsgroups: alt.freeweights.toolsSubject:

picklescan

Release: v1.0.5 (2026-07-01)Commit: f15d54dLicense: MIT

Security scanner detecting Python Pickle files performing suspicious actions

safety scannerv1.0.5releasepicklescanPythonMIT
FactsLicenseMITLanguagePythonKindsafety scannerRelease2026-07-01PlatformsLinux, macOS, WindowsLinks to the projectpermissive
$ pip install picklescan
# use with Freeweights
$ picklescan --path ./<file>

Overview

Scans pickle files for dangerous imports. Hugging Face uses it on uploads.

Kind
safety scanner
License
MIT
Language
Python
Platforms
Linux, macOS, Windows
Latest release
v1.0.5 (2026-07-01)
Repository
mmaitre314/picklescan

Freeweights links to the project and does not host tool binaries.

Install

$ pip install picklescan
# use with Freeweights
$ picklescan --path ./<file>
$ pip install picklescan

Checked against the project's README on 2026-11-14. The project's own instructions win when they differ: install docs

Freeweights links to the project and does not host tool binaries.

Use with Freeweights

Scan a downloaded model
$ picklescan --path ./<file>

Download the weights from Freeweights first (HF_ENDPOINT or fw.py), then point the tool at the folder.

Catalog models it can run (6105)

135M-lc-100k-rope-12Ba2-rl-e2egit_large-50-32Ba3-rl-DCAgent_exp_rpt_e2egit-large-15-8Ba3-rl-DCAgent_exp_rpt_e2egit-v2-10-8Ba3-rl-DCAgent_exp_rpt_pymethods2test-large-80-8Ba3-rl-DCAgent_exp_rpt_unitsyn-python-large-10-8Ba3-rl-DCAgent_mix_h2_language_proportional-65-8Ba3-rl-DCAgent_mix_h4_binary_easy-50-8Ba3-rl-laion_exp_rpt_ghactions-v3-20-8Ba3-rl-laion_nemotron-gym-agent-calendar-80-8Bablation-pymethods2test-seqmean-arm0-tis-15-8BACE-StepACE-Step-v1-3.5BAesCode-32BAesCode-8BAFM-4.5BAFM-4.5B-BaseAgentCPM-ReportAgents-A1-4Bai_vs_real_image_detectionAI-Anime-Image-Detector-ViTAI21-Jamba-Reasoning-3BAI21-Jamba2-MiniAlchemistCoder-L-7BAlexandria-Gemma-4-12B-it-Ornith9-Summaries-LoRA-r128Alexandria-Gemma-4-12B-it-Ornith9-Summaries-LoRA-r64Alexandria-Gemma-4-12B-it-Qwen27-Knowledge-Units-LoRA-r128Alexandria-Gemma-4-12B-it-Qwen27-Summaries-LoRA-r128Alexandria-Gemma-4-12B-it-Qwen27-Summaries-LoRA-r64Alexandria-Gemma-4-E4B-it-Qwen27-Knowledge-Units-LoRA-r128all-MiniLM-L6-v1all-MiniLM-L6-v2all-MiniLM-L6-v2-4bitall-mpnet-base-v1ALLaM-7B-Instruct-previewallenai-specterAM-Thinking-v1AMD-OLMo-1BAMD-OLMo-1B-SFTAMD-OLMo-1B-SFT-DPOanswerdotai-ModernBERT-base-ai-detectorApertus-70B-2509Apertus-70B-Instruct-2509Apertus-8B-2509Apertus-8B-Instruct-2509Apertus-8B-Instruct-2509-unsloth-bnb-4bitApertus-v1.1-0.5BApertus-v1.1-0.5B-InstructApertus-v1.1-1.5BApertus-v1.1-1.5B-InstructApertus-v1.1-4BApertus-v1.1-4B-InstructApex-35B-V1.0Apodex-1.1-miniApriel-1.5-15b-ThinkerApriel-1.6-15b-ThinkerApriel-Nemotron-15b-ThinkerAquila-135M-IntermediateAquila-VL-2B-IntermediateAquila-VL-2B-llava-qwen

and 6045 more.

License

License
MIT
Class
Permissive

Read the license

Freeweights links to the project and does not host tool binaries.

Provenance

From: mmaitre314 <github.com/mmaitre314>Newsgroups: alt.freeweights.toolsSubject: picklescanRelease: v1.0.5 (2026-07-01)Commit: f15d54dLicense: MIT
Repository
mmaitre314/picklescan
Pinned release
v1.0.5, 2026-07-01
Release commit
f15d54da3dec9aa28a87ede82f87882bb80f1023
Default branch
main 5e7ab22cb5bc59c4276820df5153829db4c751e8
Fetched
2026-11-14
Takedowns
None.

Freeweights links to the project and does not host tool binaries.

Works with

6105 catalog models. See the list