Roadmap
v0.1
scan_textscan_dirbetterleaks_version- Typed dataclass results
- Self-contained platform wheels
- GitHub Actions wheel builds
v0.2
- Typed
BetterleaksConfig,Rule,Extend,Expr, andRequiredRuledataclasses. - Programmatic config serialization for
scan_textandscan_dir. - Async
scan_text_asyncandscan_dir_asyncwrappers with native cooperative cancellation. - Validation env var bridging for Betterleaks Expr validators.
- Native scan tests against a curated fake-secret fixture suite.
- Reproducible synthetic benchmarks with an optional Betterleaks CLI baseline.
- Release artifact checksums.
- Better wheel smoke coverage for typed config and async.
- Musllinux/Alpine investigation. Official wheels are unsupported and remain
blocked by the current Go/musl
initial-exec TLSloader failure.
See v0.2 plan for implementation details and acceptance criteria.
v0.3
- Git worktree scan mode for local repository workflows, with tracked/staged scopes planned only if they can preserve the no-runtime-subprocess promise.
- Streaming scan result API for large scans.
- Config coverage expansion for stable Betterleaks TOML fields.
- Release hardening: API guides, benchmark artifacts, release templates, and stronger wheel smoke coverage.
See v0.3 plan for implementation details and open decisions.
Later
- GitHub/GitLab/Hugging Face/S3 source wrappers.
- Linux arm64 wheels if demand and CI capacity justify them.
- SBOM generation.
- Artifact signing.
- Published benchmark tables against Betterleaks CLI and subprocess wrappers.