Safetensors
The standard format for distributing model weights, designed so that loading a file cannot execute code.
what it is made of · the vocabulary
tensor format
It replaced Python pickle files, which could and did carry malware. If you are handling weights from anywhere but the maker, this is the format you want them in.