An Empirical Study of Pre-Trained Model Reuse in the Hugging Face Deep Learning Model Registry
Not on the map. Why?
Abstract (arXiv)
Deep Neural Networks (DNNs) are being adopted as components in software systems. Creating and specializing DNNs from scratch has grown increasingly difficult as state-of-the-art architectures grow more complex. Following the path of traditional software engineering, machine learning engineers have begun to reuse large-scale pre-trained models (PTMs) and fine-tune these models for downstream tasks. Prior works have studied reuse practices for traditional software packages to guide software engineers towards better package maintenance and dependency management. We lack a similar foundation of knowledge to guide behaviors in pre-trained model ecosystems. In this work, we present the first empirical investigation of PTM reuse. We interviewed 12 practitioners from the most popular PTM ecosystem, Hugging Face, to learn the practices and challenges of PTM reuse. From this data, we model the decision-making process for PTM reuse. Based on the identified practices, we describe useful attributes for model reuse, including provenance, reproducibility, and portability. Three challenges for PTM reuse are missing attributes, discrepancies between claimed and actual performance, and model risks. We substantiate these identified challenges with systematic measurements in the Hugging Face ecosystem. Our work informs future directions on optimizing deep learning ecosystems by automated measuring useful attributes and potential attacks, and envision future research on infrastructure and standardization for model registries.
Key facts. Cited by 45 papers in the map (data through 7 Oct 2026). Builds on 28 of its 94 references that are in the map. First posted on arXiv 5 Mar 2023.
Builds on
28 of 94 references.
References · 28
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2015Distilling the Knowledge in a Neural Networkcited by 10,076
- 2019A Comprehensive Survey on Transfer Learningcited by 1,154
- 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,052
- 2021Carbon Emissions and Large Neural Network Trainingcited by 561
- 2018Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Surveycited by 459
- 2019AutoML: A Survey of the State-of-the-Artcited by 388
- 2021Pre-Trained Models: Past, Present and Futurecited by 319
- 2020Improving Reproducibility in Machine Learning Research (A Report from the NeurIPS 2019 Reproducibility Program)cited by 318
- 2020Weight Poisoning Attacks on Pre-trained Modelscited by 318
- 2021Pruning and Quantization for Deep Neural Network Acceleration: A Surveycited by 259
- 2020Dataset Security for Machine Learning: Data Poisoning, Backdoor Attacks, and Defensescited by 171
16 more
- 2020Trustworthy AIcited by 62
- 2019Small World with High Risks: A Study of Security Threats in the npm Ecosystemcited by 36
- 2017An Empirical Comparison of Dependency Network Evolution in Seven Software Packaging Ecosystemscited by 20
- 2021What are Weak Links in the npm Supply Chain?cited by 16
- 2021EvilModel: Hiding Malware Inside of Neural Network Modelscited by 15
- 2021Machine Learning Towards Intelligent Systems: Applications, Challenges, and Opportunitiescited by 14
- 2019The Machine Learning Bazaar: Harnessing the ML Ecosystem for Effective System Developmentcited by 13
- 2019Machine Learning Software Engineering in Practice: An Industrial Case Studycited by 12
- 2020An Empirical Study of Usages, Updates and Risks of Third-Party Libraries in Java Projectscited by 11
- 2018SOTorrent: Reconstructing and Analyzing the Evolution of Stack Overflow Postscited by 9
- 2022Software Testing for Machine Learningcited by 5
- 2019On the Diversity of Software Package Popularity Metrics: An Empirical Study of npmcited by 4
- 2022What are the characteristics of highly-selected packages? A case study on the npm ecosystemcited by 3
- 2021On the Impact of Security Vulnerabilities in the npm and RubyGems Dependency Networkscited by 2
- 2019The Emergence of Software Diversity in Maven Centralcited by 1
- 2020Nine Best Practices for Research Software Registries and Repositories: A Concise Guidecited by 1
Built on by
Citing papers per year: 2023: 10; 2024: 10; 2025: 15; 2026: 10.
45 papers.
Sort:
By area:
- 2023Exploring the Carbon Footprint of Hugging Face's ML Models: A Repository Mining Studycited by 23
- 2023Analyzing the Evolution and Maintenance of ML Models on Hugging Facecited by 22
- 2025Position: Editing Large Language Models Poses Serious Safety Riskscited by 15
- 2023GSAP-NER: A Novel Task, Corpus, and Baseline for Scholarly Entity Extraction Focused on Machine Learning Models and Datasetscited by 12
- 2024Deep Learning Model Reuse in the HuggingFace Community: Challenges, Benefit and Trendscited by 12
- 2024A Large-Scale Exploit Instrumentation Study of AI/ML Supply Chain Attacks in Hugging Face Modelscited by 12
- 2023Challenges and Practices of Deep Learning Model Reengineering: A Case Study on Computer Visioncited by 11
- 2023Pitfalls in Language Models for Code Intelligence: A Taxonomy and Surveycited by 9
- 2024What do we know about Hugging Face? A systematic literature review and quantitative validation of qualitative claimscited by 8
- 2025HuggingGraph: Understanding the Supply Chain of LLM Ecosystemcited by 8
- 2023Chatmap : Large Language Model Interaction with Cartographic Datacited by 7
- 2024Lessons Learned from Mining the Hugging Face Repositorycited by 7
33 more
- 2024A Large-Scale Study of Model Integration in ML-Enabled Software Systemscited by 6
- 2025An Empirical Analysis of Machine Learning Model and Dataset Documentation, Supply Chain, and Licensing Challenges on Hugging Facecited by 6
- 2025Your Compiler is Backdooring Your Model: Understanding and Exploiting Compilation Inconsistency Vulnerabilities in Deep Learning Compilerscited by 6
- 2023The State of Documentation Practices of Third-party Machine Learning Models and Datasetscited by 5
- 2025Model Hubs and Beyond: Analyzing Model Popularity, Performance, and Documentationcited by 4
- 2025Machine Learning Models Have a Supply Chain Problemcited by 4
- 2025Economies of Open Intelligence: Tracing Power & Participation in the Model Ecosystemcited by 4
- 2024How do Machine Learning Models Change?cited by 3
- 2024"They've Stolen My GPL-Licensed Model!": Toward Standardized and Transparent Model Licensingcited by 3
- 2025PickleBall: Secure Deserialization of Pickle-based Machine Learning Models (Extended Report)cited by 3
- 2025A Rusty Link in the AI Supply Chain: Detecting Evil Configurations in Model Repositoriescited by 2
- 2025On the (In)Security of Loading Machine Learning Modelscited by 2
- 2023FootGPT : A Large Language Model Development Experiment on a Minimal Settingcited by 1
- 2023PeaTMOSS: Mining Pre-Trained Models in Open-Source Softwarecited by 1
- 2024A Partial Replication of MaskFormer in TensorFlow on TPUs for the TensorFlow Model Gardencited by 1
- 2025Model Lake: a New Alternative for Machine Learning Models Management and Governancecited by 1
- 2025Cataloguing Hugging Face Models to Software Engineering Activities: Automation and Findingscited by 1
- 2025Evidence-Driven Decision Support for AI Model Selection in Research Software Engineeringcited by 1
- 2026SafePickle: Robust and Generic ML Detection of Malicious Pickle-based ML Modelscited by 1
- 2026An Empirical Investigation of Pre-Trained Deep Learning Model Reuse in the Scientific Processcited by 1
- 2026From Registry to Repository: How AI Agent Skills Are Written, Adapted, and Maintainedcited by 1
- 2023A Novel Site-Agnostic Multimodal Deep Learning Model to Identify Pro-Eating Disorder Content on Social Mediacited by 0
- 2024Leveraging Estimated Transferability Over Human Intuition for Model Selection in Text Rankingcited by 0
- 2024Responsible AI in Open Ecosystems: Reconciling Innovation with Risk Assessment and Disclosurecited by 0
- 2025How to Select Pre-Trained Code Models for Reuse? A Learning Perspectivecited by 0
- 2025AgentHub: A Registry for Discoverable, Verifiable, and Reproducible AI Agentscited by 0
- 2026AI Supply Chain Galaxy: 3D Visual Analytics for License Compliancecited by 0
- 2026Lifecycle-Aware Dynamic Analysis for Secure ML Model Executioncited by 0
- 2026A Large-Scale Measurement of AI Bill of Materials Completeness in Hugging Face Modelscited by 0
- 2026Position: Current Model Cards Are Insufficient for Downstream Governance of Open-Weight Foundation Modelscited by 0
- 2026Broken on Arrival: Silently Defective LLM Artifacts in Public Model Registries and How to Catch Themcited by 0
- 2026After the Party: Growth, Governance, and Security Scanning in the OpenClaw Agent Skill Ecosystemcited by 0
- 2026Witeness Overlap: Directional Provenance Inside Open-Weight Model Familiescited by 0
- 2026Witeness Overlap: Directional Provenance Inside Open-Weight Model Families24 Sep 2026
- 2026After the Party: Growth, Governance, and Security Scanning in the OpenClaw Agent Skill Ecosystem15 Sep 2026
- 2026Broken on Arrival: Silently Defective LLM Artifacts in Public Model Registries and How to Catch Them5 Sep 2026
- 2026A Large-Scale Measurement of AI Bill of Materials Completeness in Hugging Face Models19 Jul 2026
- 2026From Registry to Repository: How AI Agent Skills Are Written, Adapted, and Maintained1 Jul 2026
- 2026Lifecycle-Aware Dynamic Analysis for Secure ML Model Execution17 Jun 2026
- 2026AI Supply Chain Galaxy: 3D Visual Analytics for License Compliance15 Jun 2026
- 2026Position: Current Model Cards Are Insufficient for Downstream Governance of Open-Weight Foundation Models5 Jun 2026
- 2026An Empirical Investigation of Pre-Trained Deep Learning Model Reuse in the Scientific Process13 Mar 2026
- 2026SafePickle: Robust and Generic ML Detection of Malicious Pickle-based ML Models23 Feb 2026
- 2025Evidence-Driven Decision Support for AI Model Selection in Research Software Engineering12 Dec 2025
- 2025Economies of Open Intelligence: Tracing Power & Participation in the Model Ecosystem27 Nov 2025
33 more
- 2025AgentHub: A Registry for Discoverable, Verifiable, and Reproducible AI Agents3 Oct 2025
- 2025Your Compiler is Backdooring Your Model: Understanding and Exploiting Compilation Inconsistency Vulnerabilities in Deep Learning Compilers14 Sep 2025
- 2025On the (In)Security of Loading Machine Learning Models8 Sep 2025
- 2025PickleBall: Secure Deserialization of Pickle-based Machine Learning Models (Extended Report)21 Aug 2025
- 2025HuggingGraph: Understanding the Supply Chain of LLM Ecosystem17 Jul 2025
- 2025Cataloguing Hugging Face Models to Software Engineering Activities: Automation and Findings3 Jun 2025
- 2025Machine Learning Models Have a Supply Chain Problem28 May 2025
- 2025A Rusty Link in the AI Supply Chain: Detecting Evil Configurations in Model Repositories2 May 2025
- 2025Model Lake: a New Alternative for Machine Learning Models Management and Governance27 Mar 2025
- 2025Model Hubs and Beyond: Analyzing Model Popularity, Performance, and Documentation19 Mar 2025
- 2025An Empirical Analysis of Machine Learning Model and Dataset Documentation, Supply Chain, and Licensing Challenges on Hugging Face6 Feb 2025
- 2025Position: Editing Large Language Models Poses Serious Safety Risks5 Feb 2025
- 2025How to Select Pre-Trained Code Models for Reuse? A Learning Perspective7 Jan 2025
- 2024"They've Stolen My GPL-Licensed Model!": Toward Standardized and Transparent Model Licensing16 Dec 2024
- 2024How do Machine Learning Models Change?14 Nov 2024
- 2024A Large-Scale Exploit Instrumentation Study of AI/ML Supply Chain Attacks in Hugging Face Models6 Oct 2024
- 2024Responsible AI in Open Ecosystems: Reconciling Innovation with Risk Assessment and Disclosure27 Sep 2024
- 2024Leveraging Estimated Transferability Over Human Intuition for Model Selection in Text Ranking24 Sep 2024
- 2024A Large-Scale Study of Model Integration in ML-Enabled Software Systems12 Aug 2024
- 2024What do we know about Hugging Face? A systematic literature review and quantitative validation of qualitative claims12 Jun 2024
- 2024A Partial Replication of MaskFormer in TensorFlow on TPUs for the TensorFlow Model Garden29 Apr 2024
- 2024Lessons Learned from Mining the Hugging Face Repository11 Feb 2024
- 2024Deep Learning Model Reuse in the HuggingFace Community: Challenges, Benefit and Trends24 Jan 2024
- 2023The State of Documentation Practices of Third-party Machine Learning Models and Datasets22 Dec 2023
- 2023Analyzing the Evolution and Maintenance of ML Models on Hugging Face22 Nov 2023
- 2023GSAP-NER: A Novel Task, Corpus, and Baseline for Scholarly Entity Extraction Focused on Machine Learning Models and Datasets16 Nov 2023
- 2023Pitfalls in Language Models for Code Intelligence: A Taxonomy and Survey27 Oct 2023
- 2023PeaTMOSS: Mining Pre-Trained Models in Open-Source Software5 Oct 2023
- 2023Chatmap : Large Language Model Interaction with Cartographic Data28 Sep 2023
- 2023FootGPT : A Large Language Model Development Experiment on a Minimal Setting16 Aug 2023
- 2023A Novel Site-Agnostic Multimodal Deep Learning Model to Identify Pro-Eating Disorder Content on Social Media6 Jul 2023
- 2023Exploring the Carbon Footprint of Hugging Face's ML Models: A Repository Mining Study18 May 2023
- 2023Challenges and Practices of Deep Learning Model Reengineering: A Case Study on Computer Vision13 Mar 2023
- 2023Exploring the Carbon Footprint of Hugging Face's ML Models: A Repository Mining Studycited by 23
- 2023Analyzing the Evolution and Maintenance of ML Models on Hugging Facecited by 22
- 2025Position: Editing Large Language Models Poses Serious Safety Riskscited by 15
- 2023GSAP-NER: A Novel Task, Corpus, and Baseline for Scholarly Entity Extraction Focused on Machine Learning Models and Datasetscited by 12
- 2024Deep Learning Model Reuse in the HuggingFace Community: Challenges, Benefit and Trendscited by 12
- 2024A Large-Scale Exploit Instrumentation Study of AI/ML Supply Chain Attacks in Hugging Face Modelscited by 12
- 2023Challenges and Practices of Deep Learning Model Reengineering: A Case Study on Computer Visioncited by 11
- 2023Pitfalls in Language Models for Code Intelligence: A Taxonomy and Surveycited by 9
- 2024What do we know about Hugging Face? A systematic literature review and quantitative validation of qualitative claimscited by 8
- 2025HuggingGraph: Understanding the Supply Chain of LLM Ecosystemcited by 8
- 2023Chatmap : Large Language Model Interaction with Cartographic Datacited by 7
- 2024Lessons Learned from Mining the Hugging Face Repositorycited by 7
12 most cited of 43 All 43 (JSON)
- 2026Witeness Overlap: Directional Provenance Inside Open-Weight Model Families24 Sep 2026
- 2026After the Party: Growth, Governance, and Security Scanning in the OpenClaw Agent Skill Ecosystem15 Sep 2026
- 2026Broken on Arrival: Silently Defective LLM Artifacts in Public Model Registries and How to Catch Them5 Sep 2026
- 2026A Large-Scale Measurement of AI Bill of Materials Completeness in Hugging Face Models19 Jul 2026
- 2026Lifecycle-Aware Dynamic Analysis for Secure ML Model Execution17 Jun 2026
- 2026AI Supply Chain Galaxy: 3D Visual Analytics for License Compliance15 Jun 2026
- 2026Position: Current Model Cards Are Insufficient for Downstream Governance of Open-Weight Foundation Models5 Jun 2026
- 2026An Empirical Investigation of Pre-Trained Deep Learning Model Reuse in the Scientific Process13 Mar 2026
- 2026SafePickle: Robust and Generic ML Detection of Malicious Pickle-based ML Models23 Feb 2026
- 2025Evidence-Driven Decision Support for AI Model Selection in Research Software Engineering12 Dec 2025
- 2025Economies of Open Intelligence: Tracing Power & Participation in the Model Ecosystem27 Nov 2025
- 2025Your Compiler is Backdooring Your Model: Understanding and Exploiting Compilation Inconsistency Vulnerabilities in Deep Learning Compilers14 Sep 2025
12 newest of 43 All 43 (JSON)