PyTorch Foundation adds Safetensors and Helion to its hosted project stack

On April 9, 2026, PyTorch said in an X post that Safetensors and Helion have joined the PyTorch Foundation as foundation-hosted projects. PyTorch framed the move as a way to secure model distribution for trusted agentic solutions and to simplify kernel development across the open-source AI ecosystem. The company added that the two projects now sit alongside PyTorch, vLLM, DeepSpeed, and Ray under the foundation’s hosted-project structure.

The two additions cover different layers of the stack. Safetensors is Hugging Face’s format for serializing tensors with a safer loading model than pickle-based approaches, which has made it relevant wherever teams want to move model weights without expanding arbitrary code-execution risk. Helion is Meta’s domain-specific language for machine-learning kernels, aimed at making custom kernel work more accessible. In coverage by The Stack quoted by PyTorch, Foundation CTO Matt White said portable formats across frameworks are critical for shipping and moving models around, and that Helion lowers the barrier for custom kernel development.

Governance is the real headline

The broader significance is governance, not just project count. By moving core pieces of model transport and kernel tooling into a neutral foundation structure, the PyTorch ecosystem is trying to make important infrastructure look less like vendor-specific add-ons and more like shared public rails. For teams building agent systems, that could matter in two ways: safer defaults for model exchange and a wider contributor base around performance-critical kernels. The announcement is a reminder that open-source AI competition increasingly plays out in formats, runtimes, and governance models as much as in the models themselves.