I'm creating a package in a Developer Edition and there's a couple reasons why I want to keep all my components (apex code, visualforce pages, etc) in a package.
- It lets me subscribe to the components very easily in the eclipse IDE
- It lets me upload the unmanaged package
However one of the requirements for the security review is that you scan your components with the Force.com security scanner which doesn't scan code contained in packages. Do I need to create a completely separate developer Org which has the components in a non-packaged context just so I can scan it?
Is there another way to do this?