GLM-5.3 vs WeVisOne-VL-2B

GLM-5.3 55

Memory earns nothing, since Z.ai's smallest build is the 755.6 GB FP8 one, about 907 GB with the fifth added, and Ollama only lists a cloud entry. Four runtimes run it in a released version, llama.cpp, vLLM, SGLang and Transformers, for 20, while Ollama and LM Studio have no local build. Z.ai publishes one quantised build, FP8, for 10, since the BF16 repository is the full precision. The GLM-5.3 License is a custom licence that is free for commercial use below a revenue threshold, for 10. The files download with no account or gate, for 10, and Z.ai's own API plus eight live providers on Hugging Face serve it, for 5.

WeVisOne-VL-2B 70

Memory 30, the only build from Tencent is the BF16 safetensors file with its decoder, 4.92 GB, and 4.92 GB × 1.2 = 5.9 GB, within 16 GB. No runtime library has a build. Runtimes 15, the architecture is Qwen3VLForConditionalGeneration, which vLLM 0.33.0, SGLang 0.5.23 and Transformers 5.22.2 run from the safetensors file, three at 5 each. Builds 0, Tencent publishes the BF16 weights only. Terms 15, Apache 2.0 in the card's metadata with the LICENSE file in the repository, and nothing added. Download 10, the Hub API reports gated false on 10 November 2026, so the files download with no account and nothing to accept. Hosted 0, Hugging Face maps no inference provider to it. 30 + 15 + 0 + 15 + 10 + 0 = 70.

GLM-5.3 58

The card covers intended use, languages and context and misses limitations, architecture, parameters and cut-off, for 8. Training data is 5, a description of the GLM-5 corpus in the cited report with no cut-off. The last change, a chat template speed-up on 14 October in the FP8 repository and on 15 October in the BF16 one, is within 30 days on 2 November, for 20. Responsiveness is 5, as zai-org answered 2 of the 16 discussions that aren't pull requests, the last on 8 September, which is a few, and no discussion has been opened since 10 October. Version policy is the full 10, with each GLM-5 release in its own repository and a dated blog saying what changed from GLM-5.2. File health is the full 10, with files and card agreeing and no broken-file report waiting by title.

WeVisOne-VL-2B 48

Model card 8, Intended use, limitations and the architecture are on the card. Training data 5, A general description in the README of a data engine and over 100 million annotated images, with no sources named and no cut-off. Last change 20, the last commit, on 28 October 2026, put the weights back in BF16, 13 days before this check. Responsiveness 0, the one discussion that isn't a pull request (23 October 2026) has no reply from a tencent member, counted on 10 November by author flags and dates with a script, text not read. Version policy 5, A first release. File health 10, Config, template and card agree on the Qwen3-VL classes, and the card names mask_decoder.pt as required and it's there. 8 + 5 + 20 + 0 + 5 + 10 = 48.

GLM-5.3 50

File safety is full, with safetensors only, no Python in the repository and no remote code needed in Transformers 5.12.0 or later. Provenance is full, files in the zai-org organisation Z.ai links to with a SHA-256 for every shard. Safety evaluation is 0, because the blog mentions safety evaluation and hardening but publishes no results, and agent guidance is 0, with nothing on refusals, prompt injection or cautions. Licence risk is 10, losing 5 for the security review that model-as-a-service operators above US$10 billion of revenue must pass. The security programme is 0, with no security.txt, no SECURITY.md and no advisories.

WeVisOne-VL-2B 55

File safety 15, the backbone is safetensors, but mask_decoder.pt, a PyTorch pickle the card calls a required component, sits beside it. Provenance 15, the files sit in the tencent organisation, which Tencent's GitHub repository for the model links to (10), and the Hub gives a SHA-256 for the large files (5). Safety evaluation 0, no safety results on the card or in the README. Agent guidance 5, General cautions: the card says the release is for research, isn't for autonomous high-impact decisions or identifying individuals, and lists where masks go wrong. Licence risk 15, Apache 2.0 with no use policy, no threshold and no right to change the terms. Security programme 5, Tencent's Security Response Center takes vulnerability reports company-wide, as the Hy3 listing records (5). 15 + 15 + 0 + 5 + 15 + 5 = 55.