PyPI · pypi.org

huggingface-hub

Credential file access: matched ".ssh/"

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`1.19.0`	Review	1	2026-06-11
`1.19.0rc1`	Review	1	2026-06-11
`1.19.0rc0`	Review	1	2026-06-11
`1.18.0`	Review	1	2026-06-05
`1.18.0rc0`	Review	1	2026-06-05
`1.17.0`	Review	3	2026-05-28
`1.17.0rc0`	Review	3	2026-05-28
`1.16.4`	Review	53	2026-05-26
`1.16.3`	Review	53	2026-05-26

Block this in CI

PkgRadar gates huggingface-hub (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi huggingface-hub==1.19.0