@storybook/addon-knobs

Package scaffoldingdanger

The release includes a substantial README, tests, and release notes, and the source repository also has tests and a changelog. However, the README explicitly says Knobs is deprecated in favor of @storybook/addon-controls, which materially lowers its suitability for new projects.

Release historydanger

The package has a long release history with 822 releases, but its latest release was over two years ago and it had no releases in the last 12 months. That indicates the package is no longer being actively released.

Repo commit activitydanger

The repository had no commits and no active maintainers in the last three months. This reinforces the release-history concern and increases abandonment risk.

Build provenancecaution

No build attestation or staged-publishing provenance is present, leaving publication origin less transparent. This is a supply-chain hygiene gap, though it is secondary to the package's maintenance status.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.