# Notation 1.0 work items

## Targeting two weeks after RC-4 releases

Governance:
- https://github.com/notaryproject/notation-go/issues/287, small
- https://github.com/notaryproject/notation-core-go/issues/127, small
- https://github.com/notaryproject/notaryproject/issues/244, medium
- https://github.com/notaryproject/.github/issues/21 (CNCF annual review), medium, assigned to @Feynman

Security audit:
- Threat model, medium, assigned to @yizha1
- https://github.com/notaryproject/notaryproject/pull/242
- Notation inspect, small
- https://github.com/notaryproject/notation/issues/635
- Trust store Symlink checking, small
- https://github.com/notaryproject/notation/issues/634
- Flag `--plain-http`, small assigned to @patrickzheng200
- https://github.com/notaryproject/notation/issues/623
- https://github.com/notaryproject/notation/issues/633

- Document security best practices when using Notation, medium

Notation inspect, small
- https://github.com/notaryproject/notation/issues/611
- https://github.com/notaryproject/notation/issues/646

Notation login issue: medium, dependency on oras-credential-go, assigned to @Sylvia
- https://github.com/notaryproject/notation/issues/587
- https://github.com/notaryproject/notation/issues/600

Homebrew installation (right after 1.0 released), small
- https://github.com/notaryproject/notation/issues/571

UX: output for key delete command, small, assigned to @Feynman
- https://github.com/notaryproject/notation/issues/604

Support clean up the source key and certificate generated by Notation, small
https://github.com/notaryproject/notation/issues/647

Documentation:
- 1.0 blog
- 1.0 User guide