Toxicity of the Commons: Curating Open-Source Pre-Training Data
Not on the map. Why?
Abstract (arXiv)
Open-source large language models are becoming increasingly available and popular among researchers and practitioners. While significant progress has been made on open-weight models, open training data is a practice yet to be adopted by the leading open-weight models creators. At the same time, there researchers are working to make language models safer. We propose a data curation pipeline to reduce harmful outputs by models trained on public domain data. There are unique challenges to working with public domain data, as these sources differ from web text in both form and content. Many sources are historical documents and are the result of Optical Character Recognition (OCR). Consequently, current state-of-the-art approaches to toxicity filtering are often infeasible or inappropriate for open data models. In this paper, we introduce a new fully open-source pipeline for open-data toxicity filtering. Our contributions are threefold. We create a custom training dataset, ToxicCommons, which is composed of texts which have been classified across five different dimensions (racial/origin-based, gender/sex-based, religious, ability-based discrimination, and violence). We use this dataset to train a custom classifier, Celadon, that can be used to detect toxic content in open data more efficiently at a larger scale. Finally, we describe the balanced approach to content filtration that optimizes safety filtering with respect to the filtered data available for training.
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Builds on 32 of its 68 references that are in the map. First posted on arXiv 29 Oct 2024.
Builds on
32 of 68 references.
References · 32
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,411
- 2022BLOOM: A 176B-Parameter Open-Access Multilingual Language Modelcited by 1,984
- 2023Pythia: A Suite for Analyzing Large Language Models Across Training and Scalingcited by 1,786
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
- 2021DeBERTaV3: Improving DeBERTa using ELECTRA-Style Pre-Training with Gradient-Disentangled Embedding Sharingcited by 1,254
- 2021Scaling Language Models: Methods, Analysis & Insights from Training Gophercited by 1,202
- 2024Chatbot Arena: An Open Platform for Evaluating LLMs by Human Preferencecited by 1,184
- 2024The FineWeb Datasets: Decanting the Web for the Finest Text Data at Scalecited by 1,160
- 2024OLMo: Accelerating the Science of Language Modelscited by 613
- 2021Documenting Large Webtext Corpora: A Case Study on the Colossal Clean Crawled Corpuscited by 492
- 2024Dolma: an Open Corpus of Three Trillion Tokens for Language Model Pretraining Researchcited by 483
20 more
- 2024ShieldGemma: Generative AI Content Moderation Based on Gemmacited by 243
- 2020Large image datasets: A pyrrhic win for computer vision?cited by 237
- 2024A Survey on Data Selection for Language Modelscited by 236
- 2023A Pretrainer's Guide to Training Data: Measuring the Effects of Data Age, Domain Coverage, Quality, & Toxicitycited by 182
- 2022Pile of Law: Learning Responsible Data Filtering from the Law and a 256GB Open-Source Legal Datasetcited by 113
- 2023LLM360: Towards Fully Transparent Open-Source LLMscited by 104
- 2021Challenges in Automated Debiasing for Toxic Language Detectioncited by 96
- 2021What's in the Box? A Preliminary Analysis of Undesirable Content in the Common Crawl Corpuscited by 80
- 2024A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systemscited by 77
- 2024OpenELM: An Efficient Language Model Family with Open Training and Inference Frameworkcited by 75
- 2024CroissantLLM: A Truly Bilingual French-English Language Modelcited by 53
- 2024Consent in Crisis: The Rapid Decline of the AI Data Commonscited by 46
- 2023On the Challenges of Using Black-Box APIs for Toxicity Evaluation in Researchcited by 44
- 2023BadLlama: cheaply removing safety fine-tuning from Llama 2-Chat 13Bcited by 36
- 2020Fairness and Robustness in Invariant Learning: A Case Study in Toxicity Classificationcited by 32
- 2024The 2024 Foundation Model Transparency Indexcited by 19
- 2019Algorithmic Injustices: Towards a Relational Ethicscited by 11
- 2024QueerBench: Quantifying Discrimination in Language Models Toward Queer Identitiescited by 5
- 2023Measuring Intersectional Biases in Historical Documentscited by 4
- 2023Current Topological and Machine Learning Applications for Bias Detection in Textcited by 3
Built on by
Citing papers per year: 2025: 6; 2026: 1.
7 papers.
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deploymentcited by 116
- 2025Enhancing Multilingual LLM Pretraining with Model-Based Data Selectioncited by 35
- 2025Common Corpus: The Largest Collection of Ethical Data for LLM Pre-Trainingcited by 20
- 2025From Code Foundation Models to Agents and Applications: A Comprehensive Survey and Practical Guide to Code Intelligencecited by 15
- 2025The KL3M Data Project: Copyright-Clean Training Resources for Large Language Modelscited by 6
- 2025The German Commons - 154 Billion Tokens of Openly Licensed Text for German Language Modelscited by 3
- 2026Training a General Purpose Automated Red Teaming Modelcited by 0
- 2026Training a General Purpose Automated Red Teaming Model24 Apr 2026
- 2025From Code Foundation Models to Agents and Applications: A Comprehensive Survey and Practical Guide to Code Intelligence23 Nov 2025
- 2025The German Commons - 154 Billion Tokens of Openly Licensed Text for German Language Models15 Oct 2025
- 2025Common Corpus: The Largest Collection of Ethical Data for LLM Pre-Training2 Jun 2025
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment22 Apr 2025
- 2025The KL3M Data Project: Copyright-Clean Training Resources for Large Language Models10 Apr 2025
- 2025Enhancing Multilingual LLM Pretraining with Model-Based Data Selection14 Feb 2025
Similar, not cited
Close in wording, no citation either way
- 2025Towards Safer Pretraining: Analyzing and Filtering Harmful Content in Webscale datasets for Responsible LLMs
- 2025Something Just Like TRuST : Toxicity Recognition of Span and Target
- 2025Understanding and Mitigating Toxicity in Image-Text Pretraining Datasets: A Case Study on LLaVA
- 2025<think> So let's replace this phrase with insult... </think> Lessons learned from generation of toxic texts with LLMs
- 2025Rethinking Toxicity Evaluation in Large Language Models: A Multi-Label Perspective
- 2025Text Detoxification: Data Efficiency, Semantic Preservation and Model Generalization
- 2025Concept-Based Interpretability for Toxicity Detection
- 2024ToVo: Toxicity Taxonomy via Voting