-
Notifications
You must be signed in to change notification settings - Fork 4
Serialization improvement #22
Copy link
Copy link
Open
Labels
enhancementNew feature or requestNew feature or requestquestionFurther information is requestedFurther information is requested
Milestone
Description
Current serialization uses pydantic and pickle, which poses security threats, cf https://arjancodes.com/blog/python-pickle-module-security-risks-and-safer-alternatives/
For model weights, Hugging Face has developped safetensors: https://huggingface.co/docs/safetensors/index
Is it possible de update the serialization to be fully secure ? The difficulity here is the that the cgns trees contain numpy arrays, whcih prevents straightforward json serialization
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or requestquestionFurther information is requestedFurther information is requested