protocols · huggingface

Safetensors

Zero-copy, mmap-friendly tensor serialization format with no arbitrary code execution. The safe default for distributing model weights.

Verify

What this registry has checked

Quarantine. We hold the publisher’s own published hash for these weights and have recorded it against this entry. We have not downloaded and hashed the weights ourselves, so the hash is the publisher’s claim, not our measurement.

Weight file SHA-256	c0adba81f22679ebda64631bed22543b8decf60ebdf5e25abd98779d8e63c2f9

Re-check this yourself → Source → Full record →

What is recorded

Publisher	huggingface
Origin	United States
Licence	Apache-2.0
Pulls recorded here	132,002

Elsewhere in the registry

All protocols → Browse with filters → What will run on my hardware? →

Registry record as of 2026-06-06. Identity, licence and parameter count are properties of a release and do not move; tier can, and the verify link above re-checks it against the live registry rather than this page.