Model supply chains

A model you downloaded is a dependency, in the same way a software library is.

Weights, datasets and fine-tunes are pulled from public registries with wildly varying provenance, often by whoever was prototyping, often without anyone recording where it came from. The same questions apply as anywhere else in a supply chain: who published this, can you tell it has not been altered, and would you know if the version you are running changed. These are old questions. They are simply being asked much less often here than for ordinary code.