GLM-4.7-Flash vs Step 3.7 Flash

GLM-4.7-Flash 28

The card covers architecture, parameters and languages and misses four of the seven items, for 8. Training data is 0, as the card describes none. The last change was on 1 February 2026 at the latest, within a year but past 180 days, for 5. Responsiveness is 5, since zai-org answered 6 of the 40 most recent discussions, all by 31 January, which is a few. Version policy is 5 for a first release with no files replaced, and file health is 5, as config.json and tokenizer_config.json disagree on context and a config report waits without a reply.

Step 3.7 Flash 39

Model card 14, Intended use, the architecture, the parameters, the context and the language (in the metadata) are on the card. Training data 0, Nothing on the card about the training data. Last change 10, the last commit, on 3 June 2026, fixed the modelling code, 160 days before this check and within 180. Responsiveness 0, none of the 11 most recent discussions that aren't pull requests (29 May to 24 June 2026) has a reply from a stepfun-ai member, counted on 10 November by author flags and dates with a script, text not read. Version policy 5, Step-3.5-Flash stays in its own repositories and 3.7 came out in new ones, with no dated note on the older cards that we read. File health 10, Config, template and card agree on the architecture and the context, and June commits fixed the modelling code. 14 + 0 + 10 + 0 + 5 + 10 = 39.

GLM-4.7-Flash 80

Memory earns 25, since Ollama's smallest build is the 19 GB q4_K_M one, about 22.8 GB with the fifth added, which fits 24 GB. Runtimes reach the cap of 25, with model code in released vLLM, SGLang and Transformers, a converter in a released llama.cpp build and a local entry in Ollama's library. Builds earn nothing, because Z.ai publishes only BF16 and every quantised build is someone else's. The MIT licence with nothing added gives the full 15 for terms, the files download with no account or gate for 10, and Z.ai plus three other providers serve it for 5.

Step 3.7 Flash 70

Memory 5, the smallest build at 4 bits is StepFun's IQ4_XS GGUF, 104.99 GB with the 3.97 GB projector, and 108.96 GB × 1.2 = 130.8 GB, over what the reference machine can give a model and within 256 GB. The IQ3 and Q3 builds are below 4 bits and aren't read. Runtimes 20, Released vLLM 0.33.0, SGLang 0.5.23 and Transformers 5.22.2 have the step3p7 model, and llama.cpp b12242 has the architecture, with StepFun's own GGUF. Four at 5 each, and the card documents all four. Builds 15, StepFun publishes GGUF at five quantised precisions, an FP8 build and an NVFP4 build. Terms 15, Apache 2.0 in the card's metadata and its licence section, an OSI licence with nothing added. Download 10, the Hub API reports gated false for all four repositories on 10 November 2026, so the files download with no account and nothing to accept. Hosted 5, StepFun's own API serves it, per the card and our StepFun API listing, and Featherless and DeepInfra are live for it on Hugging Face. 5 + 20 + 15 + 15 + 10 + 5 = 70.

GLM-4.7-Flash 55

File safety is full, with safetensors only and the card loading it through Transformers' own code without remote code. Provenance is full, files in the zai-org organisation Z.ai links from GitHub with a SHA-256 for every shard. Safety evaluation and agent guidance are 0, as nothing is published on either. Licence risk is the full 15, since MIT adds no policy, threshold or changeable terms, though the repository carries no LICENSE file. The security programme is 0, with no security.txt, no SECURITY file and no advisories found.

Step 3.7 Flash 45

File safety 15, safetensors and GGUF only, no .bin, .pt or .pth files (25). Provenance 15, the files sit in the stepfun-ai organisation, which the card's StepFun platform and model page belong to (10). Safety evaluation 0, no safety results on the card. Agent guidance 0, the card has no limitations section and gives no guidance on prompt injection, instruction priority, refusals or safeguards. Licence risk 15, Apache 2.0 has no use policy, threshold or change clause. Security programme 0, no way to report a flaw on the card, and our StepFun API listing found no security.txt, bug bounty or disclosure policy. 15 + 15 + 0 + 0 + 15 + 0 = 45.