How to check an SPFx package before you approve it
Drop an .sppkg into SPFx Package Inspector to see the API permissions it requests, the domains its code calls, how it deploys and any secrets, before you approve it.
-
-
Sharing Link Auditor: find and revoke the sharing links hiding in your tenant
The sharing link is the quietest oversharing vector in SharePoint. It does not appear as a permission on the site. It hides as a SharingLinks.<guid> group that nobody opens, and it outlives the project it was made for by years. Your permissions page can look spotless while a document sits shared with the whole company…
