Safetensors library audited as secure, set to become default for ML models

The safetensors library, developed by Hugging Face in collaboration with EleutherAI and Stability AI, has undergone a security audit by Trail of Bits, confirming its safety. This audit allows the organizations to move towards making safetensors the default format for saving and loading machine learning models, replacing the less secure pickle format used by PyTorch. The library offers benefits such as faster loading times and lazy loading capabilities, and will now be installed by default in the transformers library. AI

RANK_REASON External security audit of a widely-used ML model serialization library.

Read on EleutherAI Blog →

• EleutherAI
• Hugging Face
• JAX
• LLaMA
• NumPy
• PaddlePaddle
• PyTorch
• safetensors
• Stability AI
• TensorFlow
• Trail of Bits
• transformers
• StarCoder

• safety
• model release
• infra

AI-generated summary · Google Gemini · from 2 sources. How we write summaries →