@storybook/addon-controls
Empty package - please don't use it anymore
17
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
ndelangenshilmantmeasdayghengeveldwinkervsbecksyannbfkylegachjreinholdkasperpeulenvalentinpalkovicdomyenstorybook-bot
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Storybook migrated publishing from storybook-bot to GitHub Actions CI; consistent with org-wide CI transition. | ai | |
| phantom-deps | phantom-dep:lodash | AI (phantom-deps): lodash is a declared runtime dep used in bundled dist; phantom-dep heuristic is a stable FP for this package. | ai | |
| phantom-deps | phantom-dep:ts-dedent | AI (phantom-deps): ts-dedent is a declared runtime dep used in bundled dist; phantom-dep heuristic is a stable FP for this package. | ai | |
| source-diff | obfuscated-file:dist/Color-YHDXOIA2-MJT5GFQ3.js | AI (source-diff): Minified build artifact containing color-name data and React/Storybook imports; not obfuscated malware. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Size increase reflects bundling of color picker and related UI components into the addon dist; expected for this package. | ai |