Shared responsibility model

Area

Formerly in OSS

Liquibase Community 5.0

Liquibase Secure 5.0

Distribution

🟡 OSS + Pro bundled with drivers and extensions

🟡 Community core and only key required dependencies

🟢 Stand-alone Secure package with tested drivers, extensions, and deployment tooling

Dependency Management

🟡 Dependencies partially bundled; unofficial tooling

🔴 User-managed via newly-integrated Liquibase Package Manager (LPM)

🟢 Fully pre-packaged and tested

DB Driver Support

🟡 Common drivers included in base package (includes Snowflake OSS extension)

🔴 Drivers not included. User manages via LPM

🟢 Bundled, tested, and supported by Liquibase

Extension Management

🔴 External extensions not included

🔴 External extensions not included. User manages via LPM.

🟢 Enterprise extensions included and supported

Execution Behavior

🟡 Secure features fail with message

🔴 Secure features fail with info + trial link

🟢 Secure requires license key for all features

Advanced Capabilities

🔴 Not Available

🔴 Not Available

🟢 Advanced DB change management and automation capabilities, reporting and more

Governance / Policy

🔴 Not Available

🔴 Not Available

🟢 Built-in rulesets, approvals, and audit controls

Release Cadence

🟢 Infrequent (6–10 weeks), managed by Liquibase

🟡 Automated "leading edge" builds available; Periodic tested "release" builds by Liquibase; Users manage adoption

🟢 Predictable quarterly releases with upgrade support

Testing & QA

🟢 Manual + automated QA by Liquibase

🔴 Liquibase maintains core automated tests; Users validate integrations

🟢 Fully tested and certified by Liquibase

Documentation

🟢 Fully maintained by Liquibase

🟡 Core docs provided by Liquibase; Updates and Community extensions maintained by contributors and Liquibase

🟢 Complete documentation owned by Liquibase

Lifecycle Ownership

🟢 Liquibase owns build, test, and releases

🟡 Liquibase maintains the core build/test/release infrastructure; community contributes to validation

🟢 Full lifecycle owned by Liquibase

Support & SLAs

🟡 No formal SLAs; all commercial fixes merged directly to OSS repository

🔴 Community-only support; Liquibase merges community fixes to Community repo

🟢 Commercial support with SLAs and guaranteed response

Security Response

🟡 Best-effort; all commercial fixes merged directly to OSS repository and released with Pro

🔴 No SLAs on security vulnerability patches

🟢 SLA-backed security and vulnerability response