Safetensors joins the PyTorch Foundation

Hugging Face announced that Safetensors joined the PyTorch Foundation under the Linux Foundation. The format stores and transfers tensors without the arbitrary-code-execution mechanism associated with some serialization approaches. Its broader stewardship reflects its use across the model ecosystem.

Context

Infrastructure is easy to overlook until compatibility breaks. Shared formats need maintenance and clear expectations across libraries. A safer weight container still does not make every repository or loader trustworthy: the surrounding application can run code independently of the stored tensors.