Product roadmap

This page tracks what vastlint has shipped, what's actively being built, and what's planned next. It is a product roadmap for current users and contributors, not a VAST troubleshooting page. The roadmap is maintained in the ROADMAP.md file in the repository. Requests and discussion welcome in GitHub Discussions.

Shipped

Core library

vastlint-core on crates.io. Zero-dependency, zero-I/O Rust library. Spec-derived validation for IAB VAST 2.0–4.3, plus shipped SIMID support and foundational OMID AdVerification checks. Validates in under a millisecond on typical production tags. Sub-microsecond on small tags.

CLI

vastlint on crates.io and the Homebrew tap. Install with brew install aleksUIX/tap/vastlint or cargo install vastlint. Supports single-file, glob, stdin, and vastlint fix auto-repair with --dry-run, --out, and JSON fix reports.

Web validator

Paste or drop a VAST tag at vastlint.org/validate and get a structured report instantly. Powered by the WASM build of vastlint-core. Validation runs entirely client-side with no data sent to a server.

VS Code extension

Inline VAST XML validation as you type. Errors and warnings appear with rule IDs and spec references directly in the editor gutter. Install from the VS Code Marketplace.

Chrome extension

The VASTlint Chrome extension is live on the Chrome Web Store. It detects VAST XML on any page and overlays inline squiggles, hover tooltips, and a collapsible validation panel powered by the same WASM core used on vastlint.org.

REST API

Authenticated /validate endpoint available on RapidAPI. Same spec-derived checks, WASM-powered, sub-millisecond response. Drop-in for CI pipelines and ad server integrations that can't embed the native library.

Agentic workflows (MCP)

Native MCP server at vastlint.org/mcp. Connect Claude, Cursor, or any MCP-compatible agent to vastlint. Tools available: validate_vast, validate_vast_url, list_rules, explain_rule, and fix_vast. Listed on the MCP Registry.

Go bindings

Go bindings shipped at vastlint-go. One validation engine, every language: the binding is backed by the same vastlint-core via FFI.

SIMID validation

SIMID 1.0–1.2 validation is shipped in the public validator and the shared core. The rules cover InteractiveCreativeFile typing, HTTPS enforcement, URL presence, variableDuration semantics, MediaFile fallback requirements, and nonlinear IFrameResource placement.

In progress

OMID validation rollout

Core <AdVerifications><Verification> checks already ship in the public validator via the current published WASM package. The next site package refresh pulls in the latest semantic OMID pass from vastlint-core: vendor format, duplicate-vendor detection, HTTPS/resource semantics, VerificationParameters guidance,verificationNotExecuted tracking validation, and compatibility checks for pre-4.1 Extension type="AdVerifications" payloads.

Additional language bindings

Go bindings are already shipped. Next packaging targets are Erlang/Elixir, Python, Ruby, and Java, all backed by the same vastlint-core via FFI so behavior stays consistent across runtimes.

Upcoming

Side-spec validation

After the current OMID rollout finishes, the next adjacent specifications on deck are VMAP, DAAST, and IAB Content Taxonomy authority validation. As with existing rules, the checks will land in vastlint-core behind the relevant document-type or element predicates so tags that do not use the feature pay zero extra runtime cost.

VMAP 1.0

Video Multiple Ad Playlist (VMAP) documents wrap VAST tags into an ad break schedule. Planned rules cover AdBreak structure, timeOffset format, breakType enum values, and ad pod constraints.

DAAST 1.0

Digital Audio Ad Serving Template (DAAST) is a structural sibling of VAST for audio-first creative types. Planned validation covers the document structure differences and audio-specific required fields.

IAB Content Taxonomy authority validation

<Category> and <BlockedAdCategories> elements accept an authority URI. Planned rules validate that the authority URI matches a known IAB Content Taxonomy registry value.

Infrastructure

AWS Marketplace

Deploy vastlint as a private Lambda or container in your own AWS account. No VAST tag content leaves your infrastructure. Suitable for SSPs and DSPs with data residency requirements.

Realtime pipeline integration

Continuous validation of live VAST traffic: per-partner error rates, alerting, and revenue impact dashboards. Designed for RTB pipelines processing thousands of tags per second.

Have a use case we haven't covered?

Open a discussion on GitHub Discussions or file a feature request issue. The roadmap is driven by real production use cases. If something is blocking you, say so.