← Home

storybook

Storybook: Develop, document, and test UI components in isolation

100
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

ndelangentmeasdayghengeveldkasperpeulenshilmanjreinholdvalentinpalkovicstorybook-bot

Keywords

storybookcomponentcomponentsdesign-systemscomponent-testingreactnextnext.jsreact-nativereact-native-webvueangularsveltesveltekitweb-components

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff net-exec-file:dist/_node-chunks/chunk-UTMZDFPP.js AI (source-diff): Esbuild-bundled chunk with CJS compat shim; standard Storybook build output. ai
source-diff net-exec-file:dist/_node-chunks/chunk-QOQQSFOP.js AI (source-diff): Esbuild-bundled chunk with CJS compat shim; standard Storybook build output. ai
source-diff net-exec-file:dist/_node-chunks/builder-manager-5MEJYN36.js AI (source-diff): Esbuild-bundled chunk with CJS compat shim; standard Storybook build output. ai
source-diff net-exec-file:dist/_node-chunks/builder-manager-ML5UXL3U.js AI (source-diff): Esbuild-bundled chunk with CJS compat shim; expected for Storybook's build output. ai
source-diff net-exec-file:dist/_node-chunks/chunk-4CKOOAKX.js AI (source-diff): Esbuild-bundled chunk with CJS compat shim; expected for Storybook's build output. ai
source-diff net-exec-file:dist/_node-chunks/chunk-3FBJJ3J7.js AI (source-diff): Esbuild-bundled chunk with CJS compat shim; expected for Storybook's build output. ai
source-diff net-exec-file:dist/_node-chunks/chunk-YPTE6EJM.js AI (source-diff): Bundled Babel types chunk; CJS compat + network is normal for Storybook core. ai
publish-pattern rapid-publish AI (publish-pattern): CI-driven releases from GitHub Actions; rapid publish is normal for this project. ai
source-diff net-exec-file:dist/_node-chunks/chunk-QTJ23TAE.js AI (source-diff): Bundled utility chunk with CJS compat shims; expected pattern for this package. ai
source-diff net-exec-file:dist/_node-chunks/builder-manager-S4AMI67M.js AI (source-diff): Bundled dev-server chunk; network+exec is inherent to Storybook's builder functionality. ai
source-diff net-exec-file:dist/_node-chunks/chunk-FL7EBVLJ.js AI (source-diff): esbuild-bundled chunk with vendored deps; expected build output. ai
source-diff net-exec-file:dist/_node-chunks/chunk-6YHOQD7F.js AI (source-diff): esbuild-bundled chunk with vendored Babel types; expected build output. ai
source-diff net-exec-file:dist/_node-chunks/builder-manager-LFGO35U5.js AI (source-diff): esbuild-bundled chunk with vendored deps; expected for Storybook's build output. ai
source-diff net-exec-file:dist/_node-chunks/chunk-CXHD3UA6.js AI (source-diff): Bundled babel/types chunk with CJS compat shim; standard Storybook build output. ai
source-diff net-exec-file:dist/_node-chunks/builder-manager-H3RE756K.js AI (source-diff): Bundled esbuild output with CJS compat shim; expected for Storybook's builder-manager chunk. ai
source-diff net-exec-file:dist/_node-chunks/chunk-PNYLLFX3.js AI (source-diff): Bundled chunk with CJS compat shim; standard Storybook build output. ai
source-diff net-exec-file:dist/_node-chunks/chunk-WKCYHYMS.js AI (source-diff): Bundled build-tool chunk with expected network+require patterns; stable FP for storybook. ai
source-diff net-exec-file:dist/_node-chunks/builder-manager-SBMOFRIH.js AI (source-diff): Bundled build-tool chunk with expected network+require patterns; stable FP for storybook. ai
source-diff net-exec-file:dist/_node-chunks/chunk-WOCJUYI6.js AI (source-diff): Bundled build-tool chunk with expected network+require patterns; stable FP for storybook. ai
source-diff net-exec-file:dist/_node-chunks/mdx-N42X6CFJ-63AUQLMU.js AI (source-diff): MDX compiler chunk with node APIs; expected for docs processing. ai
source-diff net-exec-file:dist/_node-chunks/chunk-MKXM7JNE.js AI (source-diff): Bundled babel types/transforms chunk; standard build output. ai
source-diff net-exec-file:dist/_node-chunks/chunk-H4PWFMMO.js AI (source-diff): Core server chunk with node APIs; expected for Storybook's dev server. ai
source-diff net-exec-file:dist/_node-chunks/builder-manager-UBFFXMB4.js AI (source-diff): Builder-manager with bundled ejs/node APIs is core Storybook functionality. ai
source-diff obfuscated-file:dist/_node-chunks/mdx-N42X6CFJ-63AUQLMU.js AI (source-diff): Bundled acorn/MDX parser output from esbuild; expected for this package. ai
source-diff obfuscated-file:dist/_browser-chunks/syntaxhighlighter-OH4MV7E3.js AI (source-diff): Minified syntax-highlighter grammars bundled by esbuild; standard for Storybook. ai
source-diff large-new-source-files AI (source-diff): Storybook bundles many deps into dist chunks; large file count is normal. ai
source-diff net-exec-file:dist/_node-chunks/chunk-JXXWBFBF.js AI (source-diff): Same Storybook esbuild CJS compat banner pattern; bundled @babel/types and related libs, no malicious patterns. ai
source-diff net-exec-file:dist/_node-chunks/builder-manager-EYIS5ER3.js AI (source-diff): Storybook's esbuild build process bundles deps into node chunks with CJS compat banners; network+exec pattern is from bundled libs (ejs, babel), not malware. ai
source-diff net-exec-file:dist/_node-chunks/chunk-GOY6UMCB.js AI (source-diff): Same Storybook esbuild CJS compat banner pattern; bundled third-party libs, no malicious network/exec patterns. ai
phantom-deps phantom-dep:@testing-library/user-event AI (phantom-deps): Testing library loaded by convention in Storybook test setup; stable false positive. ai
phantom-deps phantom-dep:@testing-library/jest-dom AI (phantom-deps): Testing library loaded by convention in Storybook test setup; stable false positive. ai
phantom-deps phantom-dep:@vitest/expect AI (phantom-deps): Testing framework package loaded by convention; stable false positive for this package. ai
phantom-deps phantom-dep:@vitest/spy AI (phantom-deps): Testing framework package loaded by convention in Storybook's test utilities; not a real phantom dep concern. ai
source-diff obfuscated-file:dist/_node-chunks/mdx-N42X6CFJ-ODHTGV2Q.js AI (source-diff): Long lines are acorn parser Unicode character code data arrays — a well-known pattern in JS parsers, not obfuscation. ai
source-diff net-exec-file:dist/_node-chunks/mdx-N42X6CFJ-ODHTGV2Q.js AI (source-diff): Bundled @storybook/docs-mdx with acorn parser; long lines are Unicode char code arrays from acorn, not obfuscation. ai

Versions (showing 100 of 677)

Hide prereleases
Version Deps Published
7.0.5 1 / 0
7.0.4 1 / 0
7.0.3 1 / 0
7.0.2 1 / 0
7.0.1 1 / 0
7.0.0 1 / 0
6.5.16 1 / 0
6.5.15 1 / 0
6.5.14 1 / 0
6.5.13 1 / 0
6.5.12 1 / 0
6.5.11 1 / 0
6.5.10 1 / 0
6.5.9 1 / 0
6.5.8 1 / 0
6.5.7 1 / 0
6.5.6 1 / 0
6.5.5 1 / 0
6.5.4 1 / 0
6.5.3 1 / 0
6.5.2 1 / 0
6.5.0 1 / 0
6.4.22 1 / 0
6.4.21 1 / 0
6.4.20 1 / 0
6.4.19 1 / 0
6.4.18 1 / 0
6.4.17 1 / 0
6.4.16 1 / 0
6.4.15 1 / 0
6.4.14 1 / 0
6.4.13 1 / 0
6.4.12 1 / 0
6.4.10 1 / 0
6.4.9 1 / 0
6.4.8 1 / 0
6.4.7 1 / 0
6.4.5 1 / 0
6.4.4 1 / 0
6.4.3 1 / 0
6.4.2 1 / 0
6.4.1 1 / 0
6.4.0 1 / 0
6.3.13 1 / 0
6.3.12 1 / 0
6.3.11 1 / 0
6.3.10 1 / 0
6.3.9 1 / 0
6.3.8 1 / 0
6.3.7 1 / 0
6.3.6 1 / 0
6.3.5 1 / 0
6.3.4 1 / 0
6.3.3 1 / 0
6.3.2 1 / 0
6.3.1 1 / 0
6.3.0 1 / 0
6.2.9 1 / 0
6.2.8 1 / 0
6.2.7 1 / 0
6.2.6 1 / 0
6.2.5 1 / 0
6.2.4 1 / 0
6.2.3 1 / 0
6.2.2 1 / 0
6.2.1 1 / 0
6.2.0 1 / 0
6.1.21 1 / 0
6.1.20 1 / 0
6.1.19 1 / 0
6.1.18 1 / 0
6.1.17 1 / 0
6.1.16 1 / 0
6.1.15 1 / 0
6.1.14 1 / 0
6.1.12 1 / 0
6.1.11 1 / 0
6.1.10 1 / 0
6.1.9 1 / 0
6.1.8 1 / 0
6.1.7 1 / 0
6.1.6 1 / 0
6.1.5 1 / 0
6.1.4 1 / 0
6.1.3 1 / 0
6.1.2 1 / 0
6.1.1 1 / 0
6.1.0 1 / 0
6.0.28 1 / 0
6.0.27 1 / 0
6.0.26 1 / 0
6.0.25 1 / 0
6.0.24 1 / 0
6.0.23 1 / 0
6.0.22 1 / 0
6.0.21 1 / 0
6.0.20 1 / 0
6.0.19 1 / 0
6.0.18 1 / 0
6.0.17 1 / 0
Showing 100 of 677 Next page →