sf-2gp-security-review

Automated security review for Salesforce 2GP packages audits Apex, LWC, objects, and permissions across 15 categories. It scores PASS, WARN, or FAIL outcomes and outputs a markdown report to docs/security/security-review-report.md to prepare for AppExchange submission.

A Salesforce 2GP security audit covers inventory discovery of package contents including Apex, LWC, triggers, objects, and permissions. It evaluates security readiness across 15 distinct categories and generates a structured report with remediation guidance for AppExchange submissions.

Yes, the security audit applies to 2GP license qualification processes. It assesses managed package components and permissions, providing a pass or fail prediction along with a remediation plan to ensure compliance.

Invoke the security review on your Salesforce 2GP package to automatically generate a markdown report. The output file is saved to docs/security/security-review-report.md and includes audit scores and a structured remediation plan.

The automated security review generates a predictive PASS, WARN, or FAIL score across 15 categories and outputs a markdown remediation report. It scans Apex, LWC, and permissions but does not replace official Salesforce AppExchange security review approval.

Yes, the 2GP security audit performs inventory discovery and checks both LWC and Apex components. It audits these package contents along with objects and permissions to deliver a comprehensive security readiness score.