@chromatic-com/storybook

Maintainerscaution

The repository is organization-owned, making a 14-account registry list broadly compatible with project backing. Several publisher accounts use outside domains, including jmhobbs, tmeasday, paulelliott, and mcnuggies, which is an account-hygiene caution rather than evidence of weak maintenance capacity.

Repo toolingcaution

The project uses established build tooling and TypeScript, Vite, and related packaging tools. No security scanning tools were detected, leaving a modest hygiene gap.

Workflow auditcaution

All four workflows were analyzed with no audit findings, and no untrusted checkout or script-injection paths were detected. However, 8 of 9 action references are unpinned and one workflow grants top-level write permissions, creating a workflow reproducibility and least-privilege caution.