← Home

@storybook/web-components-vite

npm Repository Homepage

Storybook for Web Components and Vite: Develop, document, and test UI components in isolation

51
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

ndelangenshilmantmeasdayghengeveldwinkervsbecksyannbfkylegachjreinholdkasperpeulenvalentinpalkovicdomyenstorybook-bot

Keywords

storybookstorybook-frameworklitlit-htmlweb-componentsvitecomponentcomponents

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:@storybook/core-server AI (phantom-deps): Same-org dep used indirectly via bundled preset; stable false positive for this package. ai
phantom-deps phantom-dep:@storybook/node-logger AI (phantom-deps): Same-org dep used indirectly; stable false positive for this package. ai
phantom-deps phantom-dep:@storybook/web-components AI (phantom-deps): Same-org dep used indirectly; stable false positive for this package. ai
phantom-deps phantom-dep:magic-string AI (phantom-deps): Referenced in config/bundler context; stable false positive for this package. ai
provenance publisher-changed AI (provenance): jreinhold is a known Storybook core maintainer; publishing directly rather than via GitHub Actions is a legitimate workflow variation. ai
provenance no-provenance AI (provenance): Storybook publishes via GitHub Actions CI; provenance absence is consistent across the monorepo and not a risk indicator. ai

Versions (showing 51 of 73)

View all versions
Version Deps Published
10.5.5 2 / 2
10.5.4 2 / 2
10.5.3 2 / 2
10.5.2 2 / 2
10.5.1 2 / 2
10.5.0 2 / 2
10.4.6 2 / 2
10.4.5 2 / 2
10.4.4 2 / 2
10.4.3 2 / 2
10.4.2 2 / 2
10.4.1 2 / 2
10.4.0 2 / 2
10.3.6 2 / 2
10.3.5 2 / 2
10.3.4 2 / 2
10.3.3 2 / 2
10.3.2 2 / 2
10.3.1 2 / 2
10.3.0 2 / 2
10.2.19 2 / 2
10.2.18 2 / 2
10.2.17 2 / 2
10.2.16 2 / 2
10.2.15 2 / 2
10.2.14 2 / 2
10.2.13 2 / 2
10.2.12 2 / 2
10.2.11 2 / 2
10.2.10 2 / 2
10.2.9 2 / 2
10.2.8 2 / 2
10.2.7 2 / 2
10.2.6 2 / 2
10.2.5 2 / 2
10.2.4 2 / 2
10.2.3 2 / 2
10.2.2 2 / 2
10.2.1 2 / 2
10.2.0 2 / 2
10.1.11 2 / 2
10.1.10 2 / 2
10.1.9 2 / 2
10.1.8 2 / 2
10.1.7 2 / 2
10.1.6 2 / 2
10.1.5 2 / 2
10.1.4 2 / 2
10.1.3 2 / 2
10.1.2 2 / 2
10.1.1 2 / 2

v10.5.5

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v10.5.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v10.5.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v10.5.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v10.5.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v10.5.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.