Tools

Safetensors is Joining the PyTorch Foundation

Safetensors, a secure tensor serialization format originally developed by Hugging Face, has joined the PyTorch Foundation as a foundation-hosted project under the Linux Foundation, alongside DeepSp...

DGX agentarticle
toolshugging-face

Safetensors, a secure tensor serialization format originally developed by Hugging Face, has joined the PyTorch Foundation as a foundation-hosted project under the Linux Foundation, alongside DeepSpeed, Helion, Ray, vLLM, and PyTorch itself. The format was created to address the security risks of pickle-based model formats by preventing arbitrary code execution during model loading, and has since become the default standard for model distribution on the Hugging Face Hub, used by tens of thousands of models. With this transition, the project's trademark, repository, and governance move from Hugging Face to the Linux Foundation, giving Safetensors a vendor-neutral home with formalized community governance, while its existing APIs and integrations remain unchanged.

Related

Source: tools

Loading related sources…