← all repositories
skops-dev/skops

Pickle-free scikit-learn: a safer way to ship models

skops lets you persist and share scikit-learn models without the security baggage of pickle.

skops
Velocity · 7d
+0.3
★ / day
Trend
steady
star history

What it does

skops is a Python library for two specific chores: saving scikit-learn models without using pickle, and generating model cards that document what your model does and how to use it. The model cards are designed to drop straight into the Hugging Face Hub as README.md files, with metadata pre-filled so the Hub can index them properly.

The interesting bit

The skops.io persistence layer is the hook. Pickle is the default serialization path for scikit-learn, but it’s a known security risk—unpickling arbitrary code can execute it. skops replaces that with a “secure persistence” format, though the README doesn’t detail the exact mechanism or trade-offs in speed or file size.

Key highlights

  • skops.io: pickle-free model serialization for scikit-learn estimators
  • skops.card: auto-generates model cards with Hugging Face Hub-compatible metadata
  • Model cards include usage guidance and pre-populated Hub fields
  • Documentation includes worked examples for both features
  • 514 stars, active CI across Linux/macOS/Windows

Caveats

  • The README is light on technical specifics: how skops.io achieves security, performance relative to pickle, and supported estimator types are all “see the docs”
  • Only two main features; this is a focused utility, not a broad MLOps platform

Verdict

Worth a look if you’re shipping scikit-learn models to production and losing sleep over pickle’s security model. Skip it if you’re already happy with your serialization stack or need full pipeline orchestration—this is a targeted tool, not a platform.

heatdrop uses Google Analytics to see which pages get read — nothing else. Your call. How we handle data.