winget install --id bodaay.hfdownloaderAbout HuggingFace Model Downloader
The HuggingFace Model Downloader is a utility tool for downloading models and datasets from the HuggingFace website. It offers multithreaded downloading for LFS files and ensures the integrity of downloaded models with SHA256 checksum verification.
What's new in 3.2.0
Security, Reliability & Web-UI Hardening Security & Concurrency - WebSocket hub races fixed — slow-client eviction now runs under the write lock (was a concurrent map write under a read lock that could panic the hub); the send channel is closed exactly once. - WebSocket origin checks — CheckOrigin validates Origin against the allow-list (same-origin allowed, cross-origin denied by default), preventing cross-site WebSocket hijacking. - Race-free settings updates — POST /api/settings locks and publishes the proxy config copy-on-write, so it no longer races in-flight downloads. - Constant-time basic-auth comparison; checked crypto/rand; coalescer stopped on shutdown. Reliability - Stronger verification — files are SHA256-verified whenever a content hash is known (covers multipart); --verify etag now actually verifies instead of doing nothing. - Path-traversal guard on entries from the (operator-configurable) repo tree before any write. - Mirror push/pull streams blobs with io.Copy (no whole-file-into-RAM) and --verify does a real SHA256 check. - Typed errors (*APIError/*DownloadError/*VerificationError) so errors.Is/As works. Web UI - One model at a time (#85) — adding several models via Analyze used to start them all at once. Downloads now run serially (like the CLI); extra models stay queued. The setting "Concurrent downloads" is relabeled "Parallel files per model". Internal / Docs - Version sourced from the build (health, WebSocket, UI footer); removed dead blob-coordination code; documented dismiss/mirror/cache endpoints and analyze -i / download --exact. Full Changelog:...
Version history
| Version | Updated | Notes |
|---|---|---|
| 3.2.0 | Unknown | Security, Reliability & Web-UI Hardening Security & Concurrency - WebSocket hub races fixed — slow-client eviction now runs under the write lock (was a concurrent map write under a read lock that could panic the hub); th... |
| 3.1.0 | Unknown | What's Changed in v3.1.0 Features - serve: add --local-dir flag — run the web server in flat/local-file mode so all downloads are saved as real standalone files instead of the HF cache layout (#77) Bug Fixes - filter: ad... |
| 3.0.4 | Unknown | What's Changed in v3.0.4 Bug-fix release tackling eight open issues reported against v3.0.3. Focused on download correctness, webui responsiveness, storage flexibility, and analyzer coverage for new quant formats. Every... |
| 3.0.3 | Unknown | What's Changed in v3.0.3 Features - add GitHub Actions for releases and Docker, update to v3.0.0 (b1cf225) - add revision picker for multi-branch repos and improve web UI (183603c) - add modern web UI with analyze, cache... |
| 3.0.1 | Unknown | Bug Fixes - Windows Support: Gracefully skip symlinks on Windows (downloads still work, friendly view skipped) - Installer Script: Changed -i to install command to avoid conflict with CLI's -i (interactive mode) - Exampl... |
| 3.0.0 | Unknown | Release Notes - v3.0.0 Release Date: January 2026 The HuggingFace-Native Release Highlights Version 3.0.0 is a major release that brings full HuggingFace CLI compatibility. Your downloads are now stored in the standard H... |
| 2.3.4 | Unknown | Updated Build script and binaries to avoid false positive virues detection for windows builds |
| 2.3.3 | Unknown | 🐛 Bug Fixes Fixed: TUI/Web UI showing incorrect total file size - Issue: Total download size would start at 8GB, then jump to 35GB, then 214GB during download - Cause: plan_item events were emitted incrementally during d... |
| 2.3.1 | Unknown | Release Notes - v2.3.1 Release Date: December 31, 2025 🎉 Community Features This release incorporates contributions and suggestions from the community: ✨ New Features 🚫 Exclude Patterns (--exclude, -E) Exclude specific f... |
| 2.3.0 | Unknown | Release Notes - v2.3.0 Release Date: December 31, 2024 🎉 Highlights This is a major release introducing a brand new Web UI, complete project restructuring, and numerous bug fixes. The project has been reorganized into a... |
| 2.0.0 | Unknown | Cleaner mental model (one download command, sensible defaults). Filesystem‑only resume—reliable and transparent; no “state” files to corrupt. JSON events and a TUI that looks great everywhere. Strong cancellation story f... |
| 1.4.2 | Unknown | Forced cgo_enabled=0 |