To help developers work on the PackageDB it would be nice to release database dumps for them to download and install. I currently do this whenever the DB schema changes. I'd like signoff to continue doing that per the security policy.

The data in the packagedb should all be public via the interface. None of it is covered by the privacy policy. No passwords or email addresses are stored in it. Usernames will be stored in the db in the near future (userids are stored there right now). The association between usernames and packages is stored in there.