safe yaml for downloaded carts