How to check an SPFx package before you approve it
Drop an .sppkg into SPFx Package Inspector to see the API permissions it requests, the domains its code calls, how it deploys and any secrets, before you approve it.





Drop an .sppkg into SPFx Package Inspector to see the API permissions it requests, the domains its code calls, how it deploys and any secrets, before you approve it.
There was absolutely no prior indication to my first experience with the expiration of a client secret. I had several applications that all authenticated via the same app registration expire at the exact same time and it took me about twenty minutes to figure out where the problem didn’t lie. And here’s where it trips…
When I deployed my own MCP for Microsoft 365, I inadvertently exposed five tools. Five, with the entire Microsoft Graph behind it. This was intentional on my part, and this is the most straightforward way to describe the purpose of MCP. A REST API assumes somebody read it first Graph is a good API. Graph…
Every developer has his/her set of commands he/she has to repeatedly enter. A lengthy connect command for the PnP process. The gulp bundle and package-solution commands just before a deploy. A docker compose reset command in case the container gets stuck. For years, I was repeatedly retyping them, trying to search them in the history…
The team maintains a Projects list with columns for Status, Budget, Region, and an end date. Someone asks for a dashboard on the site home so that users can stop manually opening the list and row-counting. The immediate response is to use Power BI. However, the tenant does not have any Power BI Pro licenses…
Every few months SharePoint gets a feature that makes me stop and test it before I believe it. This time it is HTML pages. For years the answer to “can I put my own HTML on a modern SharePoint page” was mostly no. The old Content Editor and Script Editor web parts are gone. The…
You want a band of announcements that rotates across the top of your intranet, so people see the important ones without hunting for them. A payroll cut-off, a VPN maintenance window, a mandatory patch. Here is a web part for it. A rotating band of announcements, colour-coded by severity. It reads a SharePoint list. The…
You have a SharePoint list and you want a simple bar chart from it on a page. Tickets by status, requests by category, that sort of thing. You do not want to stand up Power BI just for that. Here is a web part that charts a list directly. A bar chart built straight from…
You want the local weather on the intranet home page. Today plus a short forecast, for whatever city you choose. Here is a web part for it, and it needs no API key. Current weather and a three-day forecast for a city. The weather comes from the open-meteo.com API, which does not need a key….
You want people to thank each other on the intranet. A simple form to send kudos, and a wall that shows the recent ones. Here is a web part that does both. A give-kudos form and a recognition wall in one web part. It reads and writes a SharePoint list. The list needs a Title…