diff --git a/.github/workflows/pkgcheck.yaml b/.github/workflows/pkgcheck.yaml
index 11e532e6aa..d19f4aa693 100644
--- a/.github/workflows/pkgcheck.yaml
+++ b/.github/workflows/pkgcheck.yaml
@@ -15,9 +15,9 @@ jobs:
       - name: Tree-wide pkgcheck error check
         uses: pkgcore/pkgcheck-action@v1
         with:
-          args: --exit error -k error,PkgMetadataXmlIndentation,DeprecatedManifestHash,UnusedInherits,-NonsolvableDepsInStable,-NonsolvableDepsInDev,-NonsolvableDepsInExp,-PotentialStable,-UnknownProfilePackage,-DeprecatedDep,-MissingUseDepDefault
+          args: --exit error -k error,PkgMetadataXmlIndentation,DeprecatedManifestHash,UnusedInherits,-NonsolvableDepsInStable,-NonsolvableDepsInDev,-NonsolvableDepsInExp,-PotentialStable,-DeprecatedDep,-MissingUseDepDefault,UnknownProfilePackageUse,OldPackageUpdate,OldMultiMovePackageUpdate,LaggingProfileEapi
 
       - name: Commit pkgcheck warnings
         uses: pkgcore/pkgcheck-action@v1
         with:
-          args: --exit warning -k ,PkgMetadataXmlIndentation,-NonsolvableDepsInStable,-NonsolvableDepsInDev,-PotentialStable,-UnknownProfilePackage,-DeprecatedDep,-MissingUseDepDefault,ProfileError,ProfileWarning --commits HEAD^..${{ github.sha }}
+          args: --exit warning -k ,PkgMetadataXmlIndentation,-NonsolvableDepsInStable,-NonsolvableDepsInDev,-PotentialStable,-DeprecatedDep,-MissingUseDepDefault,ProfileError,ProfileWarning,UnknownProfilePackageUse,OldPackageUpdate,OldMultiMovePackageUpdate,LaggingProfileEapi --commits HEAD^..${{ github.sha }}
diff --git a/.github/workflows/pkgcheck_merge.yaml b/.github/workflows/pkgcheck_merge.yaml
index 218a2b47a1..ba5240ab72 100644
--- a/.github/workflows/pkgcheck_merge.yaml
+++ b/.github/workflows/pkgcheck_merge.yaml
@@ -16,9 +16,9 @@ jobs:
       - name: Tree-wide pkgcheck error check
         uses: pkgcore/pkgcheck-action@v1
         with:
-          args: --exit error -k error,PkgMetadataXmlIndentation,DeprecatedManifestHash,UnusedInherits,-NonsolvableDepsInStable,-NonsolvableDepsInDev,-NonsolvableDepsInExp,-PotentialStable,-UnknownProfilePackage,-DeprecatedDep,-MissingUseDepDefault
+          args: --exit error -k error,PkgMetadataXmlIndentation,DeprecatedManifestHash,UnusedInherits,-NonsolvableDepsInStable,-NonsolvableDepsInDev,-NonsolvableDepsInExp,-PotentialStable,-DeprecatedDep,-MissingUseDepDefault,UnknownProfilePackageUse,OldPackageUpdate,OldMultiMovePackageUpdate,LaggingProfileEapi
 
       - name: Commit pkgcheck warnings
         uses: pkgcore/pkgcheck-action@v1
         with:
-          args: --exit warning -k ,PkgMetadataXmlIndentation,-NonsolvableDepsInStable,-NonsolvableDepsInDev,-PotentialStable,-UnknownProfilePackage,-DeprecatedDep,-MissingUseDepDefault,ProfileError,ProfileWarning --commits HEAD^..${{ github.sha }}
+          args: --exit warning -k ,PkgMetadataXmlIndentation,-NonsolvableDepsInStable,-NonsolvableDepsInDev,-PotentialStable,-UnknownProfilePackage,-DeprecatedDep,-MissingUseDepDefault,ProfileError,ProfileWarning,UnknownProfilePackageUse,OldPackageUpdate,OldMultiMovePackageUpdate,LaggingProfileEapi --commits HEAD^..${{ github.sha }}
diff --git a/profiles/pentoo/arch/x86/package.mask b/profiles/pentoo/arch/x86/package.mask
index 60af43afb0..f2ebbba87f 100644
--- a/profiles/pentoo/arch/x86/package.mask
+++ b/profiles/pentoo/arch/x86/package.mask
@@ -1,13 +1,2 @@
-=x11-drivers/nvidia-drivers-346.22
-#this doesn't build on x86 so help prefer icedtea-bin
-dev-java/icedtea
-
-#these just plain don't build on x86
-=dev-lang/rust-1.23.0-r1
-=dev-lang/rust-1.23.0
-
-#https://bugs.gentoo.org/670624
-=sys-power/thermald-1.8
-
 #this doesn't build on x86 and the upstream patch didn't seem to fix it
 =net-wireless/dump1090-5.0
diff --git a/profiles/pentoo/arch/x86/package.use.mask b/profiles/pentoo/arch/x86/package.use.mask
deleted file mode 100644
index 83b42ec197..0000000000
--- a/profiles/pentoo/arch/x86/package.use.mask
+++ /dev/null
@@ -1,2 +0,0 @@
-#looks like this stuff just doesn't work on x86 anymore
-app-crypt/johntheripper cuda opencl
diff --git a/profiles/pentoo/base/package.accept_keywords/net-wireless b/profiles/pentoo/base/package.accept_keywords/net-wireless
index 7e86e5f616..8665438e49 100644
--- a/profiles/pentoo/base/package.accept_keywords/net-wireless
+++ b/profiles/pentoo/base/package.accept_keywords/net-wireless
@@ -85,9 +85,6 @@ net-wireless/kismetmobiledashboard
 
 ~net-wireless/mfoc-0.10.7 ~amd64
 
-~net-wireless/pyrit-0.5.0
-~net-wireless/cpyrit-opencl-0.5.0
-
 net-wireless/multimode
 
 net-wireless/srsran
diff --git a/profiles/pentoo/base/package.accept_keywords/sys-devel b/profiles/pentoo/base/package.accept_keywords/sys-devel
index ccc0a1aec6..de1b2e94f1 100644
--- a/profiles/pentoo/base/package.accept_keywords/sys-devel
+++ b/profiles/pentoo/base/package.accept_keywords/sys-devel
@@ -1,7 +1,6 @@
 ### Pentoo ###
 sys-devel/gdb-dashboard
 sys-devel/gcc-arm-none-eabi
-sys-devel/pwndbg
 
 ### Gentoo ###
 #opencl stuff unversioned on purpose
diff --git a/profiles/pentoo/base/package.mask b/profiles/pentoo/base/package.mask
index 46a6249268..c756ac8095 100644
--- a/profiles/pentoo/base/package.mask
+++ b/profiles/pentoo/base/package.mask
@@ -1,47 +1,26 @@
-#newer network manager significantly improves privacy
-<net-misc/networkmanager-1.18.4-r3
-
 #xf86-video-intel is deprecated and replaced by modesetting driver
 #hold it until acceleration works
 #x11-drivers/xf86-video-intel
 
-#ssh-agent vulnerability https://www.openssh.com/releasenotes.html#9.3p2
-<net-misc/openssh-9.3_p2
-
-#force libreoffice update
-<app-office/libreoffice-7
-
-#no one wants something this old
-<dev-embedded/arduino-1.8.5
-
-#no one should be using madwifi anything
-net-wireless/madwifi-ng-tools
-
-#hopefully easy upgrade/downgrade as the gnome guys removed the middle version...
-=gnome-base/libgnome-keyring-3.4.1
-
-#mask old wireshark
-<net-analyzer/wireshark-2.6.3
-
 #force qt5 update
-<dev-qt/qtprintsupport-5.15.14
-<dev-qt/qtxmlpatterns-5.15.14
-<dev-qt/qtbluetooth-5.15.14
-<dev-qt/qtnetwork-5.15.14
-<dev-qt/qtwidgets-5.15.14
-<dev-qt/qtcharts-5.15.14
-<dev-qt/qtopengl-5.15.14
-<dev-qt/qtcore-5.15.14
-<dev-qt/qtdbus-5.15.14
-<dev-qt/qtgui-5.15.14
-<dev-qt/qtsvg-5.15.14
-<dev-qt/qtwebchannel-5.15.14
-<dev-qt/qtwebengine-5.15.14
-<dev-qt/qtwebsockets-5.15.14
-<dev-qt/qtlocation-5.15.14
-<dev-qt/qtspeech-5.15.14
-<dev-python/pyside2-5.15.14
-<dev-python/shiboken2-5.15.14
+#<dev-qt/qtbluetooth-5.15.14
+#<dev-qt/qtcharts-5.15.14
+#<dev-qt/qtcore-5.15.14
+#<dev-qt/qtdbus-5.15.14
+#<dev-qt/qtgui-5.15.14
+#<dev-qt/qtlocation-5.15.14
+#<dev-qt/qtnetwork-5.15.14
+#<dev-qt/qtopengl-5.15.14
+#<dev-qt/qtprintsupport-5.15.14
+#<dev-qt/qtspeech-5.15.14
+#<dev-qt/qtsvg-5.15.14
+#<dev-qt/qtwebchannel-5.15.14
+#<dev-qt/qtwebengine-5.15.14
+#<dev-qt/qtwebsockets-5.15.14
+#<dev-qt/qtwidgets-5.15.14
+#<dev-qt/qtxmlpatterns-5.15.14
+#<dev-python/pyside2-5.15.14
+#<dev-python/shiboken2-5.15.14
 
 #force qt6 update
 <dev-qt/qtdeclarative-6.7.2:6
@@ -55,70 +34,9 @@ net-wireless/madwifi-ng-tools
 <dev-qt/qtwayland-6.7.2-r1:6
 <dev-qt/qtsvg-6.7.2:6
 
-#kill old ruby
-dev-lang/ruby:2.1
-dev-lang/ruby:2.2
-dev-lang/ruby:2.3
-dev-lang/ruby:2.4
-dev-lang/ruby:2.5
-<virtual/rubygems-14
-<dev-ruby/did_you_mean-1.1.0
-
-# must match rails:6.1 and dev-ruby/act*:6.1
-#dev-ruby/activesupport:6.1
-
-#transition from pycrypto to pycryptodome
-dev-python/pycrypto
-
-#transition from wxGTK 2.8
-dev-python/wxpython:2.8
-x11-libs/wxGTK:2.8
-
 #force base system update
-<sys-apps/keyutils-1.5.9-r3
-<sys-apps/attr-2.4.47-r2
-<sys-fs/udev-249.6-r2
-<sys-fs/udev-init-scripts-27
-<dev-lang/perl-5.36
 <sys-devel/gcc-12
-<sys-devel/llvm-15
-<sys-devel/clang-15
 <virtual/libcrypt-2
-<media-libs/harfbuzz-3.1.1
-
-#gentoo is deprecating this, why wait
-sys-fs/eudev
-sys-apps/hwids
-
-#This versions of binutils are known broken
-#run "emerge --update binutils" then remove the broken versions
-<sys-devel/binutils-2.32-r1
-<sys-devel/binutils-libs-2.32-r1
-
-#mask old stuff to prevent downgrade and ease upgrade
-<x11-proto/presentproto-1.1-r1
-<x11-proto/xproto-7.0.31-r1
-<x11-proto/fontsproto-2.1.3-r1
-<dev-libs/icu-65.1
-<dev-libs/boost-1.72.0
-<dev-ruby/bundler-1.17.3-r1
-
-#prevent downgrade to known broken versions
-#https://bugs.archlinux.org/task/69563
-<app-emulation/runc-1.0.0_rc93
-
-#grub:0 is long dead, migration instructions here:
-#https://wiki.gentoo.org/wiki/GRUB2_Migration
-sys-boot/grub:0
-
-#old python2 only versions of ipython
-<dev-python/ipython-5.8
-
-#this package needs to be removed to upgrade
-#emerge -C 'dev-python/setuptools_scm'
-<dev-python/setuptools_scm-3
-
-<dev-tex/pgf-3.1.4b-r2
 
 #needs a license, no one wants this
 sci-libs/mkl
@@ -127,78 +45,11 @@ sci-libs/mkl
 <dev-libs/openssl-1.1.1
 <dev-libs/openssl-3
 
-#help upgrade to gnuradio 3.10
-dev-python/cheetah
-<dev-python/numpy-1.17
-<net-wireless/gnuradio-3.10
-<net-wireless/gr-osmosdr-0.2.3_p20210128-r1
-
-#no wpe patches yet
->net-dialup/freeradius-3.2.3
-
-# use a better tool, https://github.com/pentoo/pentoo-overlay/issues/564
-net-misc/rdesktop-brute
-
-# this is an old python bindings for brotli
-# app-arch/brotli provides it's own compatible version and it should be used instead
-dev-python/brotlipy
-
-#deprecated unslotted lua
-dev-lang/lua:0
-=net-dns/dnsmasq-2.83-r1
-=net-dns/dnsmasq-2.84
-
 #kill python 2.7
 <dev-libs/libgnt-2.14.3
 
-#breaks gnuradio:
-#https://bugs.gentoo.org/822966
-#https://bugs.gentoo.org/816453
-~media-libs/codec2-1.0.1
-
 #https://github.com/intoolswetrust/jd-cli/issues/81
 >dev-java/jcommander-1.32
 
-#stop constant downgrades
-<dev-cpp/abseil-cpp-20211102.0
-
-# Sam James <sam@gentoo.org> (2022-10-04)
-# (added affected pentoo-sources -Zero)
-# Regression for some Intel LCDs which may cause physical damage
-# Please upgrade to 5.19.13 if affected!
-# https://lore.kernel.org/all/YzwooNdMECzuI5+h@intel.com/
-# https://lore.kernel.org/lkml/1664893073238194@kroah.com/T/
-=sys-kernel/pentoo-sources-5.19.12
-
-#mask old kismet to ensure old version isn't selected
-<net-wireless/kismet-2022.08.1-r1
-
-#known udev bug, upgrade immediately
-#https://github.com/systemd/systemd/issues/22801
-<sys-apps/systemd-utils-252.5
-
-# Force upgrade of cython
-<dev-python/cython-3.0.0
-
-# Force upgrade of libimobiledevice/usbmuxd
-<app-pda/libimobiledevice-1.3.0-r3
-<app-pda/usbmuxd-1.1.1-r2
-
-# CVE-2023-45866 https://bugs.gentoo.org/919383
-<net-wireless/bluez-5.70-r1
-
-# Force upgrade of protobuf
-#<dev-libs/protobuf-21.12
-
-#CVE 2024-3094
-#While the CVE doesn't affect gentoo, trust level is extremely low.
-#Masking the known affected versions, may expand as information becomes available.
-~app-arch/xz-utils-5.6.0
-~app-arch/xz-utils-5.6.1
-
-#not sure why x86 is pulling in the old version
-#forcing upgrade
-<media-libs/audacity-3.3.3
-
 #force sticky upgrade
 <app-pda/libplist-2.3
diff --git a/profiles/pentoo/base/package.use.mask b/profiles/pentoo/base/package.use.mask
index 85b25735f5..0562796eef 100644
--- a/profiles/pentoo/base/package.use.mask
+++ b/profiles/pentoo/base/package.use.mask
@@ -4,9 +4,6 @@ net-wireless/urh limesdr
 #https://github.com/FreeRADIUS/freeradius-server/issues/3693 -python
 net-dialup/freeradius python
 
-#breaks ardunio
-cross-avr/gcc pie ssp
-
 #symlinks busybox to vi
 sys-apps/busybox livecd
 #basically just forces gpm and fbcon
@@ -14,8 +11,6 @@ www-client/links livecd
 
 #mesa only supports opencl for radeon users, but that doesn't allow password cracking, etc, so makes no sense for us
 media-libs/mesa opencl
-#same with wine
-app-emulation/wine opencl
 
 #portage should NEVER be built with the build flag outside of bootstrapping
 sys-apps/portage build
@@ -24,10 +19,6 @@ sys-apps/portage build
 #this breaks a lot of things, and it sounds like all the patents are expired
 dev-libs/openssl bindist
 
-#this is too old to work right anymore afaict
-net-wireless/pyrit cuda
-net-wireless/wifite2 cuda
-
 #wine doesn't need opencl for anything important afaik, and opencl sucks in gentoo
 app-emulation/wine-vanilla opencl
 
@@ -41,12 +32,6 @@ x11-base/xorg-drivers video_cards_i915
 dev-libs/libdnet python
 dev-libs/libxslt python
 
-#older versions are python 2 only
-<dev-vcs/subversion-1.14.0 python #1.14.0 doesn't actually build with python of course... https://bugs.gentoo.org/725850
-<media-gfx/gimp-2.10.21 python #doesn't actually exist yet, might need modification
-<dev-vcs/subversion-1.14.0 python
-<net-analyzer/net-snmp-5.9 python
-
 #this breaks hashcat
 dev-libs/pocl accel
 
diff --git a/profiles/pentoo/default/linux/arm/armv6j/EAPI b/profiles/pentoo/default/linux/arm/armv6j/eapi
similarity index 100%
rename from profiles/pentoo/default/linux/arm/armv6j/EAPI
rename to profiles/pentoo/default/linux/arm/armv6j/eapi
diff --git a/profiles/pentoo/default/linux/arm/armv7a/EAPI b/profiles/pentoo/default/linux/arm/armv7a/eapi
similarity index 100%
rename from profiles/pentoo/default/linux/arm/armv7a/EAPI
rename to profiles/pentoo/default/linux/arm/armv7a/eapi
diff --git a/profiles/pentoo/zero-system/package.use.mask b/profiles/pentoo/zero-system/package.use.mask
deleted file mode 100644
index 5d626a3cd9..0000000000
--- a/profiles/pentoo/zero-system/package.use.mask
+++ /dev/null
@@ -1 +0,0 @@
-sci-libs/tensorflow cuda
diff --git a/profiles/updates/1Q-2019 b/profiles/updates/1Q-2019
index b5d8076b44..cf93f32172 100644
--- a/profiles/updates/1Q-2019
+++ b/profiles/updates/1Q-2019
@@ -1,4 +1,2 @@
-move dev-python/lief dev-util/lief-bin
 move dev-python/androguard dev-util/androguard
-move app-misc/ROPgadget app-exploits/ROPgadget
 move net-misc/getsploit app-exploits/getsploit
diff --git a/profiles/updates/1Q-2022 b/profiles/updates/1Q-2022
index 8d1f3c8409..472a9f788a 100644
--- a/profiles/updates/1Q-2022
+++ b/profiles/updates/1Q-2022
@@ -1,2 +1 @@
 move app-exploits/ropgadget dev-util/ROPgadget
-move sys-devel/pwndbg dev-util/pwndbg
diff --git a/profiles/updates/2Q-2015 b/profiles/updates/2Q-2015
deleted file mode 100644
index 0e3dc2674e..0000000000
--- a/profiles/updates/2Q-2015
+++ /dev/null
@@ -1 +0,0 @@
-move kde-base/okular-backend-mupdf kde-apps/okular-backend-mupdf
diff --git a/profiles/updates/2Q-2016 b/profiles/updates/2Q-2016
deleted file mode 100644
index 34b9f4bc11..0000000000
--- a/profiles/updates/2Q-2016
+++ /dev/null
@@ -1,3 +0,0 @@
-move app-crypt/pyrit net-wireless/pyrit
-move app-crypt/cpyrit_opencl net-wireless/cpyrit-opencl
-move app-crypt/cpyrit_cuda net-wireless/cpyrit-cuda
diff --git a/profiles/updates/2Q-2017 b/profiles/updates/2Q-2017
index 4919b384c2..d03fb09752 100644
--- a/profiles/updates/2Q-2017
+++ b/profiles/updates/2Q-2017
@@ -1,2 +1 @@
-move dev-util/edb dev-util/edb-debugger
 move dev-util/metasm dev-ruby/metasm
diff --git a/profiles/updates/2Q-2021 b/profiles/updates/2Q-2021
index b3c1ed1fdd..4df67aaa6b 100644
--- a/profiles/updates/2Q-2021
+++ b/profiles/updates/2Q-2021
@@ -1,2 +1 @@
 move dev-python/PyKCS11 dev-python/pykcs11
-move app-exploits/ROPgadget app-exploits/ropgadget
diff --git a/profiles/updates/3Q-2017 b/profiles/updates/3Q-2017
deleted file mode 100644
index 602ad35c09..0000000000
--- a/profiles/updates/3Q-2017
+++ /dev/null
@@ -1 +0,0 @@
-move dev-python/h2 dev-python/hyper-h2
diff --git a/profiles/updates/4Q-2017 b/profiles/updates/4Q-2017
deleted file mode 100644
index 4ef5ac764a..0000000000
--- a/profiles/updates/4Q-2017
+++ /dev/null
@@ -1 +0,0 @@
-move libndpi/libndpi libndpi/nDPI
diff --git a/profiles/updates/4Q-2019 b/profiles/updates/4Q-2019
deleted file mode 100644
index 9e09108344..0000000000
--- a/profiles/updates/4Q-2019
+++ /dev/null
@@ -1,2 +0,0 @@
-move dev-python/capstone-python dev-libs/capstone-bindings
-move sys-devel/ropper app-exploits/ropper
diff --git a/profiles/updates/4Q-2023 b/profiles/updates/4Q-2023
deleted file mode 100644
index 77f255ebf1..0000000000
--- a/profiles/updates/4Q-2023
+++ /dev/null
@@ -1 +0,0 @@
-move dev-python/ipsw_parser dev-python/ipsw_parser