⚠️WARNING⚠️ never open a .ckpt file without knowing exactly what’s inside (especially SDXL)

We’re gonna be releasing SDXL in safetensors format.

That filetype is basically a dumb list with a bunch of numbers.

A ckpt file can package almost any kind of malicious script inside of it.

We’ve seen a few fake model files floating around claiming to be leaks.

SDXL will not be distributed as a ckpt — and neither should any model, ever.

It’s the equivalent of releasing albums in .exe format.

safetensors is safer and loads faster.

Don’t get into a pickle.

Literally.