A library for package download, validation, verification, installation and state handling similar to libalpm (pacman) will be implemented, which relies on libraries created in previous milestones and will handle collections of individual packages on user systems.

This milestone improves on existing components, such as package file download as unprivileged user, package file validation using common libraries and specifications, package signature verification and Web Key Directory (WKD) lookups using a modern OpenPGP library. The resulting library will serve as an upgrade path from the ubiquitous libalpm library and offer replacements for all of its functionalities, including common queries and support for the on-disk database formats.