microsoft / powerbi-visuals-package-validator

[DEPRECATED] Validate a Power BI custom visual package is valid for publication

DEPRECATED

This repository is no longer maintained

Usage

• gulp --file PATH_TO_PBIVIZ

Available tasks

• checkCSS StyleLint for package content, [--path PATH] for different files
• checkPackage JSONSchema for package content, [--path PATH] for different files, [--ms] for Microsoft packages
• checkSecurityJS ScanJS for package content, [--path PATH] for different files
• checkTS TSLint for package content, [--path PATH] for different files
• clean remove temp package directory ./.tmp/
• help Display help text.
• unpack Unpack Package
• validate Validate pbiviz Package [--file PATH] for package file, [--ms] for Microsoft packages

powerbi-visuals-package-validator's Issues

This repo is missing important files

There are important files that Microsoft projects should all have that are not present in this repository. A pull request has been opened to add the missing file(s). When the pr is merged this issue will be closed automatically.

Microsoft teams can learn more about this effort and share feedback within the open source guidance available internally.

Merge this pull request

Update dependencies: eslint security rules

Hi,

I found you as a dependent library of eslint-plugin-scanjs-rules.
If you want proper eslint security scanning, It is advised to use eslint-config-scanjs instead.
The config contains the scanjs-rules (which will be trimmed down step by step) as well as other useful security rules.

For example, the scanjs-rules repo just lost functionality for very imprecise checks on .write() and .writeln(). On top of that, the no-unsafe-innerhtml rule has been deprecated and replaced with no-unsanitized, which covers the write/writeln checks in a more future-proof and less error prone way.

My suggestion is to include the eslint-config-scanjs in your eslintrc instead of directly including the subprojects.

Thanks!