There's a gsoc project to integrate Vega 5 and Vega-Lite into the Maps extension.
In addition to any custom shims, the library itself needs to be reviewed.
Note: That Vega v1 through v3 libraries have previously been reviewed - see T172938.
Description
Description
Related Objects
Related Objects
- Mentioned Here
- T172938: Security review new version of the Vega lib
Event Timeline
Comment Actions
Do we want a separate ticket for Vega-Lite? Vega-Lite can be thought of as an "add-on" converter library that simply converts one JSON into a different JSON, without any other functionality (e.g. no XHR calls, no UI, etc). This way users can use a much simpler language VegaLite, and it will be dynamically converted to a full Vega.
Comment Actions
@Yurik - I think we can probably just include Vega-Lite on this task. I can update the title and description.
Comment Actions
Review stalled, waiting on further updates from related GSoC project managed by @Yurik.
Comment Actions
@sbassett sorry, unsure what you mean. Some code has already been completed -- https://github.com/nyurik/mw-graph-shared/commit/b97fd309897f701bd0db6b1d60635d0786d84887 -- making it possible to integrate the future v3+. The next step would be to create a patch for graphoid & graph ext using that shared code.
Comment Actions
@Yurik - the Security-Team is just waiting on everything to be completed (basically ready for deployment) on your's/Vega's end before we complete any further review on our end.
Comment Actions
Hi @Yurik - will we be providing additional review for you or may I close this ticket? Please let us know, and thank you!
Jennifer
Comment Actions
Thank you for the quick reply @Yurik ! Please let us know when we are needed for additional review. Cheers.