dbt-core
PyPI13.9k GitHub starsv1.12.5 · Sep 2026 · Apache-2.0 (top-level declared license)
pip install dbt-core- No known CVEs
- 22.5M downloads/mo
- 370 versions
Description
dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications.
Licenses
Declared license
Apache-2.0 (top-level declared license of dbt-core)
Transitive dependency licenses
This package's dependency tree includes MPL-2.0, which may require you to publish changes to that component when you distribute.
| License | Category | Dependencies |
|---|---|---|
| MIT | Permissive | 25 of 56 |
| Apache-2.0 | Permissive | 12 of 56 |
| non-standard | Unknown | 8 of 56 |
| BSD-3-Clause | Permissive | 7 of 56 |
| MPL-2.0 | Weak copyleft | 2 of 56 |
| Apache-2.0 OR BSD-2-Clause | Permissive | 1 of 56 |
| PSF-2.0 | Permissive | 1 of 56 |
This view is derived from declared package metadata, and a full FOSSA scan detects licenses that declared metadata misses. Scan free.
License and vulnerability information on this page is derived from public package metadata and public advisory databases. It is not legal advice, and it reflects the top-level declared license only. Verify the license and terms of any software for your own needs.
Need dbt-core approved? Get the full license and vulnerability report for your codebase. Scan free.
Scan freeVulnerabilities
No known CVEs across published versions
Version history
| Version | Published | License |
|---|---|---|
| 1.12.5 | Sep 2026 | Apache-2.0 |
| 1.12.4 | Sep 2026 | |
| 1.11.15 | Sep 2026 | |
| 1.12.3 | Aug 2026 | |
| 1.11.14 | Aug 2026 | |
| 1.2.7 | Aug 2026 | |
| 1.1.6 | Aug 2026 | |
| 1.3.8 | Aug 2026 | |
| 1.4.10 | Aug 2026 | |
| 1.5.12 | Aug 2026 | |
| 1.6.19 | Aug 2026 | |
| 1.7.20 | Aug 2026 | |
| 1.8.10 | Aug 2026 | |
| 1.9.11 | Aug 2026 | |
| 1.12.2 | Aug 2026 | |
| 1.10.23 | Aug 2026 | |
| 1.11.13 | Aug 2026 | |
| 1.12.1 | Aug 2026 | |
| 1.12.0 | Jul 2026 | |
| 1.11.12 | Jul 2026 | |
| 1.11.11 | May 2026 | |
| 1.10.22 | May 2026 | |
| 1.10.21 | May 2026 | |
| 1.11.10 | May 2026 | |
| 1.11.9 | May 2026 |
25 older releases
| Version | Published | License |
|---|---|---|
| 1.11.8 | Apr 2026 | |
| 1.11.7 | Mar 2026 | |
| 1.10.20 | Mar 2026 | |
| 1.11.6 | Feb 2026 | |
| 1.11.5 | Feb 2026 | |
| 1.11.4 | Feb 2026 | |
| 1.11.3 | Feb 2026 | |
| 1.10.19 | Jan 2026 | |
| 1.10.18 | Jan 2026 | |
| 1.11.2 | Dec 2025 | |
| 1.10.17 | Dec 2025 | |
| 1.11.1 | Dec 2025 | |
| 1.11.0Yanked | Dec 2025 | |
| 1.10.16 | Dec 2025 | |
| 1.10.15 | Nov 2025 | |
| 1.10.14 | Nov 2025 | |
| 1.10.13 | Sep 2025 | |
| 1.10.12Yanked | Sep 2025 | |
| 1.10.11 | Sep 2025 | |
| 1.9.10 | Aug 2025 | |
| 1.10.10 | Aug 2025 | |
| 1.9.9 | Aug 2025 | |
| 1.10.9 | Aug 2025 | |
| 1.10.8 | Aug 2025 | |
| 1.10.7 | Aug 2025 |
Latest pre-release: 2.0.0rc8 (Sep 2026). Pre-releases (canary, beta, release candidate and similar) are not listed.
pip install dbt-core resolves to the 1.x line today. Older major lines may still receive fixes.
Direct dependencies
25 direct dependencies, 56 in total including transitive. Licenses across the full tree are summarized under Licenses.
All 25 direct dependencies
| Package | Version range | License |
|---|---|---|
| agate | <1.15,>=1.7.0 | MIT |
| click | <9.0,>=8.3.0 | BSD-3-Clause |
| daff | >=1.3.46 | MIT |
| dbt-adapters | <2.0,>=1.24.5 | Unresolved in metadata |
| dbt-common | <2.0,>=1.37.5 | Apache-2.0 |
| dbt-core-experimental-parser | <3,>=2.0.0b1 | Apache-2.0 |
| dbt-extractor | <=0.6,>=0.5.0 | Apache-2.0 |
| dbt-protos | <2.0,>=1.0.514 | Apache-2.0 |
| jinja2 | <4,>=3.1.3 | Unresolved in metadata |
| jsonschema | <5.0,>=4.19.1 | MIT |
| mashumaro | <3.18,>=3.9 | Apache-2.0 |
| metricflow | <1.0,>=0.213.0 | Apache-2.0 |
| networkx | <4.0,>=2.3 | BSD-3-Clause |
| opentelemetry-api | <2.0,>=1.26 | Apache-2.0 |
| packaging | >20.9 | Apache-2.0 OR BSD-2-Clause |
| pathspec | <1.1,>=0.9 | MPL-2.0 |
| protobuf | <8.0,>=6.0 | BSD-3-Clause |
| pydantic | <3 | MIT |
| python-dotenv | >=1.2 | BSD-3-Clause |
| pytz | >=2015.7 | MIT |
| pyyaml | >=6.0 | MIT |
| requests | <3.0.0 | Apache-2.0 |
| snowplow-tracker | <2.0,>=1.0.2 | Apache-2.0 |
| sqlparse | <0.7.0,>=0.5.5 | Unresolved in metadata |
| typing-extensions | >=4.4 | PSF-2.0 |
Based on what each package declares in its published metadata. The dependencies your build actually installs can differ, and a FOSSA scan of your project resolves the full tree.
Popularity
- Downloads last month
- 22.5M
- Known dependents in this corpus
- 243
- GitHub stars
- 13.9k
- OpenSSF score
- 6 / 10
FAQ
- What is the latest version of dbt-core?
- The latest version of dbt-core is 1.12.5, published September 2026.
- What license is dbt-core under?
- dbt-core declares Apache-2.0 as its top-level declared license. Its dependency tree spans 7 distinct licenses.
- Does dbt-core have known vulnerabilities?
- No known CVEs are recorded against published versions of dbt-core.
- How do I install dbt-core?
- Install dbt-core with pip install dbt-core.
- How do I generate an SBOM that includes dbt-core?
- FOSSA's SBOM generator produces SPDX or CycloneDX output for a codebase that includes dbt-core. Generate an SPDX or CycloneDX SBOM free.