safetensors

A model file format that stores only tensors with their names and shapes, so loading it can't run code. Prefer it over pickle-based `.pt` and `.bin` files.