I am trying to write an application in SF Lightning that uses angular (not angularjs, angular, version 7 if it matters) as the front end. To handle this (since it truly is a separate app that is hosted and backed by SF for data provisioning and login provisioning) we are putting it in a lightning container.
I know that quite a lot of custom development goes on in Angular in SF, but my concern is getting past the security review to put it on the App exchange. Has this been done before? Is it common?
I think we can certainly meet the necessary security guidelines in our application, however, we do use a few external components like the froala html editor. Can someone with some experience of this tell me what challenges I am likely to find in the security review with these external modules?
My fear is that I commit a lot of effort and energy into developing an application in this format and, after all the work is sunk cost, I get to the security review and encounter completely unsolvable problems. So anything that you can offer to help me understand this would be great.