API design — still not done.

Security review — scheduled, postponed, scheduled.

Documentation — last version is two releases old.

Access control — “we’ll figure it out.”