Posit AI Weblog: safetensors 0.1.0

safetensors is a brand new, easy, quick, and protected file format for storing tensors. The design of the file format and its authentic implementation are being led
by Hugging Face, and it’s getting largely adopted of their well-liked ‘transformers’ framework. The safetensors R bundle is a pure-R implementation, permitting to each learn and write safetensor information.

The preliminary model (0.1.0) of safetensors is now on CRAN.

Motivation

The primary motivation for safetensors within the Python neighborhood is safety. As famous
within the official documentation:

The primary rationale for this crate is to take away the necessity to use pickle on PyTorch which is utilized by default.

Pickle is taken into account an unsafe format, because the motion of loading a Pickle file can
set off the execution of arbitrary code. This has by no means been a priority for torch
for R customers, because the Pickle parser that’s included in LibTorch solely helps a subset
of the Pickle format, which doesn’t embody executing code.

Nevertheless, the file format has extra benefits over different generally used codecs, together with:

• Assist for lazy loading: You possibly can select to learn a subset of the tensors saved within the file.

• Zero copy: Studying the file doesn’t require extra reminiscence than the file itself.
  (Technically the present R implementation does makes a single copy, however that may
  be optimized out if we actually want it sooner or later).

• Easy: Implementing the file format is easy, and doesn’t require complicated dependencies.
  Which means that it’s a superb format for exchanging tensors between ML frameworks and
  between totally different programming languages. As an example, you may write a safetensors file
  in R and cargo it in Python, and vice-versa.

There are extra benefits in comparison with different file codecs widespread on this area, and
you may see a comparability desk right here.

Format

The safetensors format is described within the determine beneath. It’s principally a header file
containing some metadata, adopted by uncooked tensor buffers.

Fundamental utilization

safetensors will be put in from CRAN utilizing:

set up.packages("safetensors")

library(torch)
library(safetensors)

tensors <- record(
  x = torch_randn(10, 10),
  y = torch_ones(10, 10)
)

str(tensors)
#> Checklist of two
#>  $ x:Float [1:10, 1:10]
#>  $ y:Float [1:10, 1:10]

tmp <- tempfile()
safe_save_file(tensors, tmp)

tensors <- safe_load_file(tmp)
str(tensors)
#> Checklist of two
#>  $ x:Float [1:10, 1:10]
#>  $ y:Float [1:10, 1:10]
#>  - attr(*, "metadata")=Checklist of two
#>   ..$ x:Checklist of three
#>   .. ..$ form       : int [1:2] 10 10
#>   .. ..$ dtype       : chr "F32"
#>   .. ..$ data_offsets: int [1:2] 0 400
#>   ..$ y:Checklist of three
#>   .. ..$ form       : int [1:2] 10 10
#>   .. ..$ dtype       : chr "F32"
#>   .. ..$ data_offsets: int [1:2] 400 800
#>  - attr(*, "max_offset")= int 929

remotes::install_github("mlverse/torch")

Picture by Nick Fewings on Unsplash

Reuse

Textual content and figures are licensed below Artistic Commons Attribution CC BY 4.0. The figures which have been reused from different sources do not fall below this license and will be acknowledged by a observe of their caption: “Determine from …”.

Quotation

For attribution, please cite this work as

Falbel (2023, June 15). Posit AI Weblog: safetensors 0.1.0. Retrieved from https://blogs.rstudio.com/tensorflow/posts/2023-06-15-safetensors/

BibTeX quotation

@misc{safetensors,
  writer = {Falbel, Daniel},
  title = {Posit AI Weblog: safetensors 0.1.0},
  url = {https://blogs.rstudio.com/tensorflow/posts/2023-06-15-safetensors/},
  12 months = {2023}
}