Roadmap
What is shipped, in progress and planned for OCX, by theme. Each row links to its issue or pull request on GitHub where one exists.
Composable Packages
Section titled “Composable Packages”Multi-layer OCI artifacts that let publishers compose packages from reusable building blocks. Share stable internals across releases and apply infrastructure-specific patches without rebuilding from scratch.
| Feature | Status | Link |
|---|---|---|
| Multi-layer artifacts | In progress | #20, #22 |
| Infrastructure patches | Shipped | #21 |
| Shared internals | Planned | — |
| Delta downloads | Planned | — |
Dependencies
Section titled “Dependencies”Packages declare dependencies on other packages, enabling automatic resolution for composable toolchains. A Java application can require a specific JRE version, and OCX resolves the full graph.
| Feature | Status | Link |
|---|---|---|
| Dependency resolution | Shipped | #13 |
| Dependency mounting | Planned | #31 |
| Path interpolation | Planned | #32 |
| Parallel resolution | Planned | #28 |
| Toolchain config | Planned | #33 |
| Transitive constraints | Planned | — |
System Requirements
Section titled “System Requirements”Packages declare required host capabilities like glibc version, musl compatibility, or specific CPU features. OCX validates the host before installation and selects the best matching variant.
| Feature | Status | Link |
|---|---|---|
| Package variants | Shipped | #14 |
| Host capabilities | Planned | — |
| Pre-install validation | Planned | — |
| Variant fallbacks | Planned | — |
Referrer API
Section titled “Referrer API”Attach SBOMs, signatures, and attestations to existing releases using the OCI Referrers API. No need to re-publish a package to add supply-chain metadata after the fact.
| Feature | Status | Link |
|---|---|---|
| OCI referrers | Planned | #24 |
| SBOM attachment | Planned | — |
| Post-publish attestations | Planned | — |
| Signature discovery | Planned | — |
Interoperability
Section titled “Interoperability”First-class integrations with the tools and platforms where developers already work. From build systems to CI pipelines to local development environments, OCX meets you where you are.
| Feature | Status | Link |
|---|---|---|
| Bazel module | In progress | #12 |
| GitHub Actions | In progress | ocx-sh/setup-ocx |
| DevContainer features | Planned | — |
| mise backend plugin | Planned | #34 |
| Shims & lazy loading | Planned | — |
| Air-gap export/import | Planned | #25 |
Hardening
Section titled “Hardening”Stabilizing the CLI interface and package metadata format for long-term reliability. Improved error messages, better documentation, and a commitment to backwards compatibility.