Undocumented GGUF repositories, disappearing Hugging Face models, sparse model cards and API key theft expose gaps in validation, provenance and security across the open-model supply chain.
A user reports models disappearing from Hugging Face, highlighting an often overlooked risk for self-hosted deployments: the model supply chain is revocable. The names of the vanished models - uncensored, offensive cyber, abliterated - point to likel...
A Hugging Face repository called RecursiveSI/flint, followed by the string 40B A2.5B, revives the issue of transparency around open models. With no model card or numerical precision details, the name becomes a battleground for those calculating on-pr...
Anthropic is giving METR employee-like access to evaluate the safety of its systems and has started early discussions with other organizations, including Hugging Face. This shifts trust from vendor self-assessment to independent, distributed auditing...
OpenCode, an open source coding agent popular as an alternative to Claude Code and Cursor, suffered a breach of its online platform: attackers stole some users' API keys and used them to inflate AI account charges. AI tools asked to inspect the malic...
Irene Solaiman, Hugging Face's chief policy officer, has warned that model benchmarking methods are complex and still maturing. Embedded evaluators are not a shortcut. For anyone choosing an LLM, evaluation is a governance issue, not just a technical...
The bi-weekly r/LocalLLaMA thread asks creators to present open source, locally hostable projects and explain why they matter, how they compare, and how they were tested. More than a showcase, it signals a shift from model availability to software cr...
A GGUF repository with no notes on Hugging Face shifts verification costs to deployers. AI-Radar analyzes quantization, context, VRAM, and provenance, showing why missing documentation blocks self-hosted pipelines, TCO calculation, and sovereignty.
A repository named unsloth/DeepSeek-V4.1-Flash-1017-GGUF has appeared on Hugging Face without any official document or announcement from the Unsloth team. The lack of technical notes leaves open questions about quantization, context window, and VRAM ...
