TODO - Project Roadmap

April 9, 2026 ยท View on GitHub

This document tracks planned features, improvements, and long-term goals for the PKG repository.

High Priority

External references to review

Documentation

  • README.md - Added detailed project overview, quick start, features
  • CONTRIBUTING.md - Created contribution guidelines and workflow documentation
  • Enhanced SECURITY.md - Expanded security policy with best practices
  • Package README template - Created standard template for package documentation
  • Build system documentation - Detailed guide for build.sh and Docker builds
  • Optimization guide - Best practices for optimizing PKGBUILDs
  • Troubleshooting guide - Common issues and solutions

Infrastructure

  • Automated testing framework - Test packages in clean chroot environments
  • Binary repository - Host pre-built packages for easy installation
  • Package version tracking - Automated upstream version checking
  • Notification system - Alert on security updates and new versions

Medium Priority

Package Improvements

  • Add more optimized PKGBUILDs

  • Python (PGO-optimized build)

  • GCC (optimized bootstrap)

  • Node.js (with custom V8 flags)

  • PostgreSQL (with JIT and optimizations)

  • Nginx (with custom modules)

  • Enhance existing packages

    • Firefox: BOLT optimization refinement
    • Chromium: Update to latest patches
    • Mesa: Latest upstream features
    • LLVM: PGO instrumentation
    • gitoxide: Fix optimize.patch to be valid
    • varia: Create PKGBUILD from make-appimage.sh

  • Package-specific follow-ups

  • AppImage integration research

  • Citron AppImage

  • Azahar AppImage Enhanced

  • Package documentation improvements

  • Standardize all package READMEs using template

  • Add performance benchmarks where applicable

  • Document build options thoroughly

Build System

  • Enhanced caching

  • Distributed ccache/sccache setup

  • PGO profile caching and reuse

  • Source tarball caching

  • Build optimization

  • Parallel package builds

  • Build dependency graph generation

  • Incremental build support

  • Docker improvements

  • Multi-stage Docker builds

  • Smaller base images

  • Layer optimization

Quality Assurance

  • Automated package testing

  • Basic functionality tests

  • Integration tests for complex packages

  • Performance regression testing

  • Code quality improvements

  • Pre-commit hooks setup

  • Automated formatting enforcement (yamlfmt, biome integration)

  • Additional linting rules (enhanced shellcheck, ruff, yamlfmt)

  • Security enhancements

  • Automated vulnerability scanning (dependency-review with fail-on-severity)

  • Supply chain verification (dependency-review)

  • Reproducible builds

Low Priority / Long-term

Cross-Platform Support

  • AppImages

  • Research AppImage integration

  • Create AppImage build pipeline

  • Compatibility testing (Arch, Debian, Termux)

  • Documentation for AppImage creation

  • Container images

  • OCI/Docker images from PKGBUILDs

  • Automated image building

  • Image registry setup

Patch Management

  • TKG patches integration

  • Implement autofetch for community patches

  • Patch compatibility testing

  • Automated patch updating

  • User-selectable patch sets

  • Custom patch repository

  • Centralized patch management

  • Patch versioning and tracking

  • Automated patch application testing

Debloating Project

  • Archlinux-pkgs-debloated
  • Define debloating criteria
  • Identify common bloat patterns
  • Create debloated variants
  • Document removed features

Advanced Optimizations

  • Profile-Guided Optimization (PGO)

  • Automated PGO profile generation

  • Profile sharing infrastructure

  • Workload-specific profiles

  • BOLT optimization

  • Expand BOLT to more packages

  • BOLT profile optimization

  • Performance measurement framework

  • Architecture-specific builds

  • x86-64-v2, v3, v4 variants

  • ARM64 support

  • RISC-V experimental builds

Community Features

  • Package request system

  • Template for package requests

  • Prioritization mechanism

  • Community voting

  • Build farm

  • Distributed build infrastructure

  • Community-contributed builders

  • Build status dashboard

  • Package adoption program

  • Guidelines for package maintainers

  • Co-maintainer system

  • Maintainer documentation

Automation

  • CI/CD enhancements

  • Multi-architecture builds (arm64 support enabled)

  • Enhanced Docker security (capability dropping, no-new-privileges)

  • Input validation for workflow_dispatch

  • Optimized caching strategies

  • Automated package updates

  • Upstream monitoring

  • Changelog generation

  • Release automation

  • Bot integration

  • Automated issue triage

  • PR auto-review for common issues

  • Dependency update automation

  • Metrics and monitoring

  • Build time tracking

  • Success rate monitoring

  • Popular package analytics

Completed

  • Enhanced README.md (2025-12-20)
  • Created CONTRIBUTING.md (2025-12-20)
  • Improved SECURITY.md (2025-12-20)
  • Package README template (2025-12-20)
  • Better TODO.md organization (2025-12-20)
  • Git hooks setup with lefthook (2025-12-24)
  • Workflow refactoring and optimization (2025-12-29)
  • Removed irrelevant webpack.yml workflow
  • Enhanced build.yml with multi-arch support, Docker security hardening, input validation
  • Upgraded to latest action versions (arch-pkgbuild-builder@v1.25)
  • Replaced yamllint with yamlfmt and prettier with biome in lint.yml
  • Enhanced dependency-review.yml with security options (fail-on-severity, license controls)
  • Added proper error handling with set -euo pipefail across workflows
  • Removed unsafe apt-get upgrade operations from CI
  • Added Docker operation timeouts and security constraints

Ideas / Research

These are ideas that need more research before committing:

  • Multi-distribution support: Beyond Arch, support other distros
  • Flatpak integration: Compile packages as Flatpaks
  • WebAssembly builds: Experimental WASM compilation
  • GPU-accelerated builds: Use GPU for certain build tasks
  • Machine learning optimizations: ML-guided optimization selection
  • Blockchain verification: Decentralized package verification (research only)

References

Projects

Technical Resources

Contributing to This TODO

To suggest additions or changes to this roadmap:

  1. Open an issue with the enhancement or proposal label
  2. Describe the feature/improvement and its benefits
  3. Include implementation details if available
  4. Link to related issues or PRs

Last Updated: 2026-01-01 Maintainer: Ven0m0