@chromatic-com/storybook

Maintainerscaution

The organization-backed project has 14 registry publishers, though several accounts use outside domains, including jmhobbs, tmeasday, paulelliott, and mcnuggies; this is account-hygiene caution rather than evidence of limited maintenance capacity.

Repo toolingcaution

The project uses established build tooling and has a working build tool, but no security scanning tools were detected, leaving a modest repository-hygiene gap.

Workflow auditcaution

All four workflows were analyzed with no auditor findings or untrusted checkout and script-injection paths. However, eight of nine action references are unpinned and one workflow grants top-level write permissions, so workflow reproducibility and least-privilege hygiene remain cautions.