Roadmap to Production

[jonesbusy]

This is the masic meta-issue releated to a 1.0.0 of the ORAS Java SDK

Done in 1st proposal

• OCI image spec
• Pull / push byte blobs
• Pull / push manifest
• Pull / push Artifacts via Path and Stream (including compression)
• Basic authentication and token flow
• Get tags
• JSON interface using GSON (could switch to Jackson if more flexibility is needed)
• Build for Java 17 (more project are abandoning support for Java 11 including Jenkins, Maven 4.0 etc...)
• Test framework (testcontainer + WireMock)
• SLF4 interface for logging
• Null annotation using JSpecify
• Publish to GitHub registry maven library on merge to main
• Dependabot update
• PR build workflow

Roamap

APIs

• Referer API #12
• Chunk upload #13
• Copy support #14

Authentication

• Support reading credentials from file store #15
• Support reading credentials from docker credential store #16

Performance, optimization and validation

• Ensure performance and caching for authentication token #17
• Retry HTTP requests #18
• Implement more robust tests scenario using Wiremock #23
• Ensure memory consuption when pushing/pulling large artifact #25
• Security reviews and make sure code is safe #26

Distribution and packaging

• Deploy to Maven central #19
• Publish browsable Javadoc #22

Documentation and repository management

• Document release management #20
• Contributing guide  #21
• Documentation on https://oras.land/docs/category/client-libraries #24