Roadmap
Implementation status, completed milestones, and future directions for the Zudo framework.
Timeline
v1.x — Core Framework
The foundational release. 39 packages across 6 architecture layers, all published to npm.
Audit & Hardening — Rounds 9–11
A numbered audit series over every package. Each finding is reproduced by executing the real source before it is written down, and ships with a regression test that fails against the unfixed code. Round 11 closed 98 findings, 3 of them critical, with the suite green at 7,891 tests.
Forwarded headers are ignored unless trustProxy is set, so a client cannot choose its own req.ip. An OPTIONS request can no longer reach another method’s handler.
The queue owns its reserved zudo:context metadata key, so an enqueuer can no longer hand a job the tenant it runs as.
Secret detection moved into the config store itself, so toSafeObject() redacts initialValues and runtime set() values, not only values read from a source.
Fourteen capabilities that were typed, exported and documented but never invoked are now wired up or removed — the defect class these rounds exist to find.
Near-Term — Expand Ecosystem
Broadening the package ecosystem and developer experience.
Express, Fastify, Koa, Hono transport adapters.
Code generation templates for modules, services, handlers.
Interactive project setup, package upgrades, migration tools.
Full reference docs, guides, tutorials, and examples.
A client-side httpQuery() convenience method for GET requests. The server-side query parser is complete and hardened; this is the client helper that builds on it.
Mid-Term — Platform & Integrations
Building the ecosystem around Zudo.
Discover and install community plugins. Version management, compatibility checks.
AWS, GCP, Azure adapters. Serverless deployment, container orchestration.
Pre-built Grafana dashboards, Prometheus exporters, health check endpoints.
Built-in admin interface for managing config, users, and feature flags.
Long-Term — The Future
Where Zudo is ultimately headed.
Run Zudo on Node.js, Deno, Bun, and Cloudflare Workers.
Deploy Zudo modules to edge locations with zero config.
AI code generation, auto-completion, and intelligent refactoring.