Home Artificial Intelligence Posit AI Weblog: safetensors 0.1.0

Posit AI Weblog: safetensors 0.1.0

Posit AI Weblog: safetensors 0.1.0


safetensors is a brand new, easy, quick, and secure file format for storing tensors. The design of the file format and its unique implementation are being led
by Hugging Face, and it’s getting largely adopted of their common ‘transformers’ framework. The safetensors R bundle is a pure-R implementation, permitting to each learn and write safetensor recordsdata.

The preliminary model (0.1.0) of safetensors is now on CRAN.


The primary motivation for safetensors within the Python neighborhood is safety. As famous
within the official documentation:

The primary rationale for this crate is to take away the necessity to use pickle on PyTorch which is utilized by default.

Pickle is taken into account an unsafe format, because the motion of loading a Pickle file can
set off the execution of arbitrary code. This has by no means been a priority for torch
for R customers, because the Pickle parser that’s included in LibTorch solely helps a subset
of the Pickle format, which doesn’t embrace executing code.

Nonetheless, the file format has further benefits over different generally used codecs, together with:

  • Help for lazy loading: You’ll be able to select to learn a subset of the tensors saved within the file.

  • Zero copy: Studying the file doesn’t require extra reminiscence than the file itself.
    (Technically the present R implementation does makes a single copy, however that may
    be optimized out if we actually want it in some unspecified time in the future).

  • Easy: Implementing the file format is straightforward, and doesn’t require advanced dependencies.
    Because of this it’s an excellent format for exchanging tensors between ML frameworks and
    between totally different programming languages. As an example, you possibly can write a safetensors file
    in R and cargo it in Python, and vice-versa.

There are further benefits in comparison with different file codecs frequent on this house, and
you possibly can see a comparability desk right here.


The safetensors format is described within the determine under. It’s mainly a header file
containing some metadata, adopted by uncooked tensor buffers.

Diagram describing the safetensors file format.

Primary utilization

safetensors could be put in from CRAN utilizing:

Nick Fewings on Unsplash


Textual content and figures are licensed below Artistic Commons Attribution CC BY 4.0. The figures which were reused from different sources do not fall below this license and could be acknowledged by a notice of their caption: “Determine from …”.


For attribution, please cite this work as

Falbel (2023, June 15). Posit AI Weblog: safetensors 0.1.0. Retrieved from https://blogs.rstudio.com/tensorflow/posts/2023-06-15-safetensors/

BibTeX quotation

  writer = {Falbel, Daniel},
  title = {Posit AI Weblog: safetensors 0.1.0},
  url = {https://blogs.rstudio.com/tensorflow/posts/2023-06-15-safetensors/},
  12 months = {2023}



Please enter your comment!
Please enter your name here