Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
llama-node
Advanced tools
llama-node: Node.js Library for Large Language Model
Picture generated by stable diffusion.
This project is in an early stage and is not production ready, we do not follow the semantic versioning. The API for nodejs may change in the future, use it with caution.
This is a nodejs library for inferencing llama, rwkv or llama derived models. It was built on top of llm (originally llama-rs), llama.cpp and rwkv.cpp. It uses napi-rs for channel messages between node.js and llama thread.
llama.cpp backend supported models (in GGML format):
llm(llama-rs) backend supported models (in GGML format):
rwkv.cpp backend supported models (in GGML format):
Node.js version: >= 16
npm install llama-node
Install anyone of the inference backends (at least one)
npm install @llama-node/llama-cpp
npm install @llama-node/core
npm install @llama-node/rwkv-cpp
Please see how to start with manual compilation on our contribution guide
Please read the document on our site to get started with manual compilation related to CUDA support
This library was published under MIT/Apache-2.0 license. However, we strongly recommend you to cite our work/our dependencies work if you wish to reuse the code from this library.
Join our Discord community now! Click to join llama-node Discord
FAQs
Node.js Library for Large Language Model LLaMA/RWKV
The npm package llama-node receives a total of 2,739 weekly downloads. As such, llama-node popularity was classified as popular.
We found that llama-node demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.