Hugging Face announced that Safetensors, its serialization format for safely storing tensors, is joining the PyTorch Foundation. The format was designed to avoid the arbitrary code execution risks associated with pickle-based formats while offering fast loading of large models. It has become a common way to distribute model weights on the Hugging Face Hub.
According to Hugging Face, the move gives Safetensors a neutral home under an established foundation, which already hosts PyTorch and related projects. The company says this will help ensure the format evolves with broad community input rather than being tied to a single vendor.
The announcement frames the transfer as a step toward deeper interoperability and shared infrastructure in the AI ecosystem. No technical changes to the format itself were announced as part of the transition.