PyTorch model weights are commonly saved and stored as
.bin files with Python’s
pickle utility. To save and store your model weights in the more secure
safetensor format, we recommend converting your weights to
The easiest way to convert your model weights is to use the Convert Space, given your model weights are already stored on the Hub. The Convert Space downloads the pickled weights, converts them, and opens a Pull Request to upload the newly converted
.safetensors file to your repository.