@storybook/core-client

Package scaffoldingcaution

The package includes a README that directs consumers to @storybook/preview-api and says it will not be released in Storybook 8. Repository tests and changelog support project maturity, but this release has a limited forward path.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package, which creates some uncertainty about the package-to-repository relationship; the monorepo context partly explains the mismatch but does not remove it.

Workflow auditcaution

All 19 workflows were analyzed with no failed files, no untrusted checkouts, no script injection, and all 46 action references pinned. Two high-confidence, low-severity adhoc-package findings remain, where workflows install packages outside a lockfile.