Evidence tier Source Confirmed · 8 captures on record
What the publisher says
As described on Microsoft Marketplace.
Alembic is an open-source database migration tool for Python applications that use SQLAlchemy. It helps developers create, manage, and apply version-controlled database schema migrations, ensuring database structures remain synchronized with application code throughout development, testing, and production deployments.
The solution supports common database migration workflows including schema versioning, migration generation, database upgrades and downgrades, and seamless integration with SQLAlchemy-based applications such as Flask, FastAPI, and other Python frameworks.
Show the rest of the publisher’s description (21 more lines)
Key Features of Alembic:
- Open-source database schema migration tool maintained by the SQLAlchemy community.
- Version-controlled migration history for reliable database change management.
- Automatic migration generation using schema comparison (autogenerate).
- Supports manual migration scripting for complex database changes.
- Compatible with SQLAlchemy ORM and SQLAlchemy Core.
- Works with MySQL, PostgreSQL, SQLite, MariaDB, Oracle, Microsoft SQL Server, and other SQLAlchemy-supported databases.
- Supports transactional DDL where the target database allows it.
- Command-line interface for creating, applying, rolling back, and managing migrations.
- Ideal for development, testing, CI/CD pipelines, and production deployments.
Alembic Usage:
Create a Python virtual environment:
python3 -m venv alembic-env
Activate the virtual environment:
source alembic-env/bin/activate
Check the installed Alembic version:
alembic --version
Verify the installed package using pip:
pip show alembic
Disclaimer:
Alembic is an open-source database migration tool developed and maintained by the SQLAlchemy community and its contributors. This content is provided for informational purposes only. We are not affiliated with or endorsed by the Alembic project. All trademarks, product names, and logos are the property of their respective owners.
Agent build and provenance
See the full provenance
The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.
Compliance
- FedRAMPConfirmedNot listed90%, registry-checkedNo FedRAMP Marketplace entry matched this vendor's domain, checked 2026-08-27registry recordas observed 2026-08-27
Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.
Vendor
External enrichment · as of 2026-08-29
Sources
Publisher resources
1 linkLinked repositories
Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.
Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.

