Skip to main content
FOSSA Logo
Skip to package details

dbt-core

PyPI13.7k GitHub stars

v1.12.3 · Aug 2026 · Apache-2.0 (top-level declared license)

pip install dbt-core
  • No known CVEs
  • 94.2M downloads/mo
  • 359 versions

Description

dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications.

License exposure

This package's dependency tree includes MPL-2.0, which may require you to publish changes to that component when you distribute.

This view is derived from declared package metadata, and a full FOSSA scan detects licenses that declared metadata misses. Scan free.

License and vulnerability information on this page is derived from public package metadata and public advisory databases. It is not legal advice, and it reflects the top-level declared license only. Verify the license and terms of any software for your own needs.

Need dbt-core approved? Get the full license and vulnerability report for your codebase. Scan free.

Scan free

Vulnerabilities

No known CVEs across published versions

Version history

Published versions
VersionPublishedLicense
1.12.3Aug 2026
1.11.14Aug 2026
2.0.0b2Aug 2026
1.2.7Aug 2026
1.1.6Aug 2026
1.3.8Aug 2026
1.4.10Aug 2026
1.5.12Aug 2026
1.6.19Aug 2026
1.7.20Aug 2026
1.8.10Aug 2026
1.9.11Aug 2026
1.12.2Aug 2026
1.10.23Aug 2026
1.11.13Aug 2026
1.12.1Aug 2026
2.0.0b1Aug 2026
2.0.0a5Jul 2026
1.12.0Jul 2026
1.12.0rc3Jul 2026

pip install dbt-core resolves to the 1.x line today. Older major lines may still receive fixes.

Dependencies

All 25 direct dependencies
  • agate
  • click
  • daff
  • dbt-adapters
  • dbt-common
  • dbt-core-experimental-parser
  • dbt-extractor
  • dbt-protos
  • jinja2
  • jsonschema
  • mashumaro
  • metricflow
  • networkx
  • opentelemetry-api
  • packaging
  • pathspec
  • protobuf
  • pydantic
  • python-dotenv
  • pytz
  • pyyaml
  • requests
  • snowplow-tracker
  • sqlparse
  • typing-extensions

These edges are declared in package metadata. FOSSA’s build-replication scan can resolve a different graph.

Popularity

  • 94.2M downloads in the last month
  • 218 known dependents in this corpus
  • 13.7k GitHub stars
  • OpenSSF score 6

FAQ

What is the latest version of dbt-core?
The latest version of dbt-core is 1.12.3, published August 2026.
What license is dbt-core under?
dbt-core declares Apache-2.0 as its top-level declared license. Its dependency tree spans 7 distinct licenses.
Does dbt-core have known vulnerabilities?
No known CVEs are recorded against published versions of dbt-core.
How do I install dbt-core?
Install dbt-core with pip install dbt-core.
How do I generate an SBOM that includes dbt-core?
FOSSA's SBOM generator produces SPDX or CycloneDX output for a codebase that includes dbt-core. Generate an SPDX or CycloneDX SBOM free.

Dependency graph and package metadata from deps.dev (Google Open Source Insights), used under CC BY 4.0.

Download counts from PyPI Stats, sourced from the Python Software Foundation download statistics. Counts cover the last 180 days and exclude known mirrors.

Repository stars from the GitHub API.

OpenSSF Scorecard results from deps.dev.

License and vulnerability information on this page is derived from public package metadata and public advisory databases. It is not legal advice, and it reflects the top-level declared license only. Verify the license and terms of any software for your own needs.