Safetensors were created because people were distributing models as python pickles, the basic built-in serialization format of Python. https://checkoway.net/mu

Safetensors were created because people were distributing models as python pickles, the basic built-in serialization format of Python. https://checkoway.net/musings/pickle/ https://checkoway.net/musings/pickle/ If you want in on the fun.