What Thumper reviews and how long it takes

• The files match what you uploaded and the version you named.
• It loads in the app it's made for, and nothing runs when it is installed.
• The license file matches the license on the listing.
• Every file that runs code is listed, as the code policy requires.
• The description says honestly what buyers get.

Pickle model files (.ckpt, .pt, .pth and PyTorch .bin files) can run code when they're opened, so buyers never get them. When a version includes one, Thumper converts it to safetensors without running anything in it, checks that every tensor matches, and offers you the converted file on the new version. Add it to the version in a new commit, then send it for review.

Some files can't be converted, and the version says why:

• A whole Python model saved with its code, not just its weights. Save the weights on their own.
• A TorchScript program.
• Number formats safetensors doesn't have, such as quantized weights.
• A damaged or incomplete file.

Upload safetensors or GGUF instead, or convert on your computer first with thumper models convert. It writes the safetensors file and a report of every tensor.

Reply to the review note or open a support ticket from the listing. A review lowers risk; it can't prove code is safe, and Thumper can withdraw a release later after a safety review.