mlsanityData to 7 Oct 2026

An Empirical Study of Pre-Trained Model Reuse in the Hugging Face Deep Learning Model Registry

arXiv 2303.02552 ↗First posted 5 Mar 2023cs.SE cs.AI cs.LGcited by 45

Not on the map. Why?

Abstract (arXiv)

Deep Neural Networks (DNNs) are being adopted as components in software systems. Creating and specializing DNNs from scratch has grown increasingly difficult as state-of-the-art architectures grow more complex. Following the path of traditional software engineering, machine learning engineers have begun to reuse large-scale pre-trained models (PTMs) and fine-tune these models for downstream tasks. Prior works have studied reuse practices for traditional software packages to guide software engineers towards better package maintenance and dependency management. We lack a similar foundation of knowledge to guide behaviors in pre-trained model ecosystems. In this work, we present the first empirical investigation of PTM reuse. We interviewed 12 practitioners from the most popular PTM ecosystem, Hugging Face, to learn the practices and challenges of PTM reuse. From this data, we model the decision-making process for PTM reuse. Based on the identified practices, we describe useful attributes for model reuse, including provenance, reproducibility, and portability. Three challenges for PTM reuse are missing attributes, discrepancies between claimed and actual performance, and model risks. We substantiate these identified challenges with systematic measurements in the Hugging Face ecosystem. Our work informs future directions on optimizing deep learning ecosystems by automated measuring useful attributes and potential attacks, and envision future research on infrastructure and standardization for model registries.

Key facts. Cited by 45 papers in the map (data through 7 Oct 2026). Builds on 28 of its 94 references that are in the map. First posted on arXiv 5 Mar 2023.

Builds on

28 of 94 references.

References · 28

  1. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
  2. 2015Distilling the Knowledge in a Neural Networkcited by 10,076
  3. 2019A Comprehensive Survey on Transfer Learningcited by 1,154
  4. 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,052
  5. 2021Carbon Emissions and Large Neural Network Trainingcited by 561
  6. 2018Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Surveycited by 459
  7. 2019AutoML: A Survey of the State-of-the-Artcited by 388
  8. 2021Pre-Trained Models: Past, Present and Futurecited by 319
  9. 2020Improving Reproducibility in Machine Learning Research (A Report from the NeurIPS 2019 Reproducibility Program)cited by 318
  10. 2020Weight Poisoning Attacks on Pre-trained Modelscited by 318
  11. 2021Pruning and Quantization for Deep Neural Network Acceleration: A Surveycited by 259
  12. 2020Dataset Security for Machine Learning: Data Poisoning, Backdoor Attacks, and Defensescited by 171
16 more
  1. 2020Trustworthy AIcited by 62
  2. 2019Small World with High Risks: A Study of Security Threats in the npm Ecosystemcited by 36
  3. 2017An Empirical Comparison of Dependency Network Evolution in Seven Software Packaging Ecosystemscited by 20
  4. 2021What are Weak Links in the npm Supply Chain?cited by 16
  5. 2021EvilModel: Hiding Malware Inside of Neural Network Modelscited by 15
  6. 2021Machine Learning Towards Intelligent Systems: Applications, Challenges, and Opportunitiescited by 14
  7. 2019The Machine Learning Bazaar: Harnessing the ML Ecosystem for Effective System Developmentcited by 13
  8. 2019Machine Learning Software Engineering in Practice: An Industrial Case Studycited by 12
  9. 2020An Empirical Study of Usages, Updates and Risks of Third-Party Libraries in Java Projectscited by 11
  10. 2018SOTorrent: Reconstructing and Analyzing the Evolution of Stack Overflow Postscited by 9
  11. 2022Software Testing for Machine Learningcited by 5
  12. 2019On the Diversity of Software Package Popularity Metrics: An Empirical Study of npmcited by 4
  13. 2022What are the characteristics of highly-selected packages? A case study on the npm ecosystemcited by 3
  14. 2021On the Impact of Security Vulnerabilities in the npm and RubyGems Dependency Networkscited by 2
  15. 2019The Emergence of Software Diversity in Maven Centralcited by 1
  16. 2020Nine Best Practices for Research Software Registries and Repositories: A Concise Guidecited by 1

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2023: 10; 2024: 10; 2025: 15; 2026: 10.

45 papers.

Sort:

By area:

  1. 2023Exploring the Carbon Footprint of Hugging Face's ML Models: A Repository Mining Studycited by 23
  2. 2023Analyzing the Evolution and Maintenance of ML Models on Hugging Facecited by 22
  3. 2025Position: Editing Large Language Models Poses Serious Safety Riskscited by 15
  4. 2023GSAP-NER: A Novel Task, Corpus, and Baseline for Scholarly Entity Extraction Focused on Machine Learning Models and Datasetscited by 12
  5. 2024Deep Learning Model Reuse in the HuggingFace Community: Challenges, Benefit and Trendscited by 12
  6. 2024A Large-Scale Exploit Instrumentation Study of AI/ML Supply Chain Attacks in Hugging Face Modelscited by 12
  7. 2023Challenges and Practices of Deep Learning Model Reengineering: A Case Study on Computer Visioncited by 11
  8. 2023Pitfalls in Language Models for Code Intelligence: A Taxonomy and Surveycited by 9
  9. 2024What do we know about Hugging Face? A systematic literature review and quantitative validation of qualitative claimscited by 8
  10. 2025HuggingGraph: Understanding the Supply Chain of LLM Ecosystemcited by 8
  11. 2023Chatmap : Large Language Model Interaction with Cartographic Datacited by 7
  12. 2024Lessons Learned from Mining the Hugging Face Repositorycited by 7
33 more
  1. 2024A Large-Scale Study of Model Integration in ML-Enabled Software Systemscited by 6
  2. 2025An Empirical Analysis of Machine Learning Model and Dataset Documentation, Supply Chain, and Licensing Challenges on Hugging Facecited by 6
  3. 2025Your Compiler is Backdooring Your Model: Understanding and Exploiting Compilation Inconsistency Vulnerabilities in Deep Learning Compilerscited by 6
  4. 2023The State of Documentation Practices of Third-party Machine Learning Models and Datasetscited by 5
  5. 2025Model Hubs and Beyond: Analyzing Model Popularity, Performance, and Documentationcited by 4
  6. 2025Machine Learning Models Have a Supply Chain Problemcited by 4
  7. 2025Economies of Open Intelligence: Tracing Power & Participation in the Model Ecosystemcited by 4
  8. 2024How do Machine Learning Models Change?cited by 3
  9. 2024"They've Stolen My GPL-Licensed Model!": Toward Standardized and Transparent Model Licensingcited by 3
  10. 2025PickleBall: Secure Deserialization of Pickle-based Machine Learning Models (Extended Report)cited by 3
  11. 2025A Rusty Link in the AI Supply Chain: Detecting Evil Configurations in Model Repositoriescited by 2
  12. 2025On the (In)Security of Loading Machine Learning Modelscited by 2
  13. 2023FootGPT : A Large Language Model Development Experiment on a Minimal Settingcited by 1
  14. 2023PeaTMOSS: Mining Pre-Trained Models in Open-Source Softwarecited by 1
  15. 2024A Partial Replication of MaskFormer in TensorFlow on TPUs for the TensorFlow Model Gardencited by 1
  16. 2025Model Lake: a New Alternative for Machine Learning Models Management and Governancecited by 1
  17. 2025Cataloguing Hugging Face Models to Software Engineering Activities: Automation and Findingscited by 1
  18. 2025Evidence-Driven Decision Support for AI Model Selection in Research Software Engineeringcited by 1
  19. 2026SafePickle: Robust and Generic ML Detection of Malicious Pickle-based ML Modelscited by 1
  20. 2026An Empirical Investigation of Pre-Trained Deep Learning Model Reuse in the Scientific Processcited by 1
  21. 2026From Registry to Repository: How AI Agent Skills Are Written, Adapted, and Maintainedcited by 1
  22. 2023A Novel Site-Agnostic Multimodal Deep Learning Model to Identify Pro-Eating Disorder Content on Social Mediacited by 0
  23. 2024Leveraging Estimated Transferability Over Human Intuition for Model Selection in Text Rankingcited by 0
  24. 2024Responsible AI in Open Ecosystems: Reconciling Innovation with Risk Assessment and Disclosurecited by 0
  25. 2025How to Select Pre-Trained Code Models for Reuse? A Learning Perspectivecited by 0
  26. 2025AgentHub: A Registry for Discoverable, Verifiable, and Reproducible AI Agentscited by 0
  27. 2026AI Supply Chain Galaxy: 3D Visual Analytics for License Compliancecited by 0
  28. 2026Lifecycle-Aware Dynamic Analysis for Secure ML Model Executioncited by 0
  29. 2026A Large-Scale Measurement of AI Bill of Materials Completeness in Hugging Face Modelscited by 0
  30. 2026Position: Current Model Cards Are Insufficient for Downstream Governance of Open-Weight Foundation Modelscited by 0
  31. 2026Broken on Arrival: Silently Defective LLM Artifacts in Public Model Registries and How to Catch Themcited by 0
  32. 2026After the Party: Growth, Governance, and Security Scanning in the OpenClaw Agent Skill Ecosystemcited by 0
  33. 2026Witeness Overlap: Directional Provenance Inside Open-Weight Model Familiescited by 0