Where we're headed

Multi-layer OCI artifacts that let publishers compose packages from reusable building blocks. Share stable internals across releases and apply infrastructure-specific patches without rebuilding from scratch.

Packages declare dependencies on other packages, enabling automatic resolution for composable toolchains. A Java application can require a specific JRE version, and OCX resolves the full graph.

Packages declare required host capabilities like glibc version, musl compatibility, or specific CPU features. OCX validates the host before installation and selects the best matching variant.

Attach SBOMs, signatures, and attestations to existing releases using the OCI Referrers API. No need to re-publish a package to add supply-chain metadata after the fact.

First-class integrations with the tools and platforms where developers already work. From build systems to CI pipelines to local development environments, OCX meets you where you are.

Stabilizing the CLI interface and package metadata format for long-term reliability. Improved error messages, better documentation, and a commitment to backwards compatibility.