FastPLMs source is distributed under the Apache License 2.0. Model checkpoints, official source repositories, and copied third-party components have their own terms. The model manifest records code and checkpoint licenses separately.
Each family records Hugging Face model-card metadata separately from its
human-readable checkpoint terms. Standard checkpoints use the Hub identifiers
mit, apache-2.0, or cc-by-nc-sa-4.0. E1 uses other with the name and
source link for its clickthrough agreement. DPLM1 and DPLM2 use
apache-2.0. Missing or mismatched identifiers block generation and artifact
validation.
LICENSES/ contains distributable copies of required legal texts.
THIRD_PARTY_NOTICES.md maps each model family and component to its source,
revision, terms, modifications, and attribution. Release validation compares
these files to the canonical pinned upstream files by hash.
ANKH implementations and mirrored weights are retained under CC BY-NC-SA 4.0. Artifacts and model cards show those terms prominently. FastPLMs does not implement a runtime restriction or decide if a use satisfies the license.
E1 retains the upstream agreement, ATTRIBUTION, NOTICE, Apache and BSD
texts, modified-file notices, and documentation attribution. Relevant launches
display Profluent-E1. Redistribution and use are subject to the upstream
agreement. Review LICENSES/e1/ before use.
The ByteDance DPLM repository carries an
Apache-2.0 license
and its official README
defines the repository release as including pretrained weights for both DPLM1
and DPLM2. FastPLMs records both checkpoint families as Apache-2.0,
with Hub metadata license: apache-2.0,
weights_license_status="resolved", and redistributable=true.
LICENSES/dplm/ contains the verbatim license and immutable evidence record.
Complete publication fails closed unless the artifact, legal inventory,
state-parity evidence, and atomic Hub preflight pass.
Biohub MIT and Apache notices, including THIRD_PARTY_NOTICE, are retained for
ESM++, ESM3, and ESMFold2. Boltz MIT terms, Meta ESM and ESMFold notices,
OpenFold notices, and ProteinTTT source records are included where their code or
derived behavior is distributed.
ESMFold2 additionally uses a 417,306,584-byte ccd.pkl runtime asset under MIT
terms. The manifest pins repository, immutable revision, path, size, and
SHA-256. Because it is pickle, validated deserialization is an explicit trust
boundary. The loader rejects user and cache_dir symlinks, except for the exact
manifest snapshot link resolving into its repository's contained blob
directory. It copies into a private loader-owned temporary snapshot, verifies
that snapshot's size and hash, and unpickles only those verified bytes. Offline
runs require the exact cache object and never fetch a substitute.
An artifact or reference container fails validation when a required source revision, license, notice, attribution, modified-file record, or conversion record is absent. Reference images receive only the legal files relevant to their corresponding upstream. Runtime images contain no official submodules or checkpoint weights.
This guide summarizes repository policy and is not legal advice. The complete
texts in LICENSES/ and the original upstream sources control.