safetensors
Safe file format for ML model weights — replacing the unsafe pickle-based .pt/.bin.
Created by Hugging Face. Classic pickle weights can execute arbitrary code on load — a supply-chain attack if you load untrusted models. safetensors is pure binary metadata + tensors. Standard in modern releases.