Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
This package provides a MLServer runtime compatible with Scikit-Learn.
You can install the runtime, alongside mlserver
, as:
pip install mlserver mlserver-sklearn
For further information on how to use MLServer with Scikit-Learn, you can check out this worked out example.
If no content type is present on the request or metadata, the Scikit-Learn runtime will try to decode the payload as a NumPy Array. To avoid this, either send a different content type explicitly, or define the correct one as part of your model's metadata.
The Scikit-Learn inference runtime exposes a number of outputs depending on the
model type.
These outputs match to the predict
, predict_proba
and transform
methods
of the Scikit-Learn model.
Output | Returned By Default | Availability |
---|---|---|
predict | ✅ | Available on most models, but not in Scikit-Learn pipelines. |
predict_proba | ❌ | Only available on non-regressor models. |
transform | ❌ | Only available on Scikit-Learn pipelines. |
By default, the runtime will only return the output of predict
.
However, you are able to control which outputs you want back through the
outputs
field of your {class}InferenceRequest <mlserver.types.InferenceRequest>
payload.
For example, to only return the model's predict_proba
output, you could
define a payload such as:
---
emphasize-lines: 10-12
---
{
"inputs": [
{
"name": "my-input",
"datatype": "INT32",
"shape": [2, 2],
"data": [1, 2, 3, 4]
}
],
"outputs": [
{ "name": "predict_proba" }
]
}
FAQs
Scikit-Learn runtime for MLServer
We found that mlserver-sklearn demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.