Skip to main content
FOSSA Logo
Skip to package details

dbt-core

PyPI13.8k GitHub stars

v1.12.4 · Sep 2026 · Apache-2.0 (top-level declared license)

pip install dbt-core
  • No known CVEs
  • 58M downloads/mo
  • 363 versions

Description

dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications.

License exposure

This package's dependency tree includes MPL-2.0, which may require you to publish changes to that component when you distribute.

This view is derived from declared package metadata, and a full FOSSA scan detects licenses that declared metadata misses. Scan free.

License and vulnerability information on this page is derived from public package metadata and public advisory databases. It is not legal advice, and it reflects the top-level declared license only. Verify the license and terms of any software for your own needs.

Need dbt-core approved? Get the full license and vulnerability report for your codebase. Scan free.

Scan free

Vulnerabilities

No known CVEs across published versions

Version history

Published versions
VersionPublishedLicense
2.0.0rc2Sep 2026
1.12.4Sep 2026
1.11.15Sep 2026
2.0.0rc1Sep 2026
1.12.3Aug 2026
1.11.14Aug 2026
2.0.0b2Aug 2026
1.2.7Aug 2026
1.1.6Aug 2026
1.3.8Aug 2026
1.4.10Aug 2026
1.5.12Aug 2026
1.6.19Aug 2026
1.7.20Aug 2026
1.8.10Aug 2026
1.9.11Aug 2026
1.12.2Aug 2026
1.10.23Aug 2026
1.11.13Aug 2026
1.12.1Aug 2026

pip install dbt-core resolves to the 1.x line today. Older major lines may still receive fixes.

Dependencies

All 25 direct dependencies
  • agate
  • click
  • daff
  • dbt-adapters
  • dbt-common
  • dbt-core-experimental-parser
  • dbt-extractor
  • dbt-protos
  • jinja2
  • jsonschema
  • mashumaro
  • metricflow
  • networkx
  • opentelemetry-api
  • packaging
  • pathspec
  • protobuf
  • pydantic
  • python-dotenv
  • pytz
  • pyyaml
  • requests
  • snowplow-tracker
  • sqlparse
  • typing-extensions

These edges are declared in package metadata. FOSSA’s build-replication scan can resolve a different graph.

Popularity

  • 58M downloads in the last month
  • 228 known dependents in this corpus
  • 13.8k GitHub stars
  • OpenSSF score 6

FAQ

What is the latest version of dbt-core?
The latest version of dbt-core is 1.12.4, published September 2026.
What license is dbt-core under?
dbt-core declares Apache-2.0 as its top-level declared license. Its dependency tree spans 7 distinct licenses.
Does dbt-core have known vulnerabilities?
No known CVEs are recorded against published versions of dbt-core.
How do I install dbt-core?
Install dbt-core with pip install dbt-core.
How do I generate an SBOM that includes dbt-core?
FOSSA's SBOM generator produces SPDX or CycloneDX output for a codebase that includes dbt-core. Generate an SPDX or CycloneDX SBOM free.

Dependency graph and package metadata from deps.dev (Google Open Source Insights), used under CC BY 4.0.

Download counts from PyPI Stats, sourced from the Python Software Foundation download statistics. Counts cover the last 180 days and exclude known mirrors.

Repository stars from the GitHub API.

OpenSSF Scorecard results from deps.dev.

License and vulnerability information on this page is derived from public package metadata and public advisory databases. It is not legal advice, and it reflects the top-level declared license only. Verify the license and terms of any software for your own needs.