@storybook/client-logger

Package scaffoldingcaution

The published artifact has no README, but tests and a changelog are correctly present in the source repository; omitting tests and changelogs from a compiled package is normal. The missing package README is a minor consumer-documentation gap.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package, which creates a package-to-source transparency concern. However, the organization-backed monorepo structure makes a subpackage mismatch plausible, so this is only a minor caution.

Token permissionscaution

Most workflows use read-only permissions, but four omit top-level permissions and four declare top-level write access. This is a modest workflow-hardening gap in an otherwise actively scanned repository.