94%
Total Score
healthy
Active Storybook monorepo with rapid releases, broad contributors, security tooling, and verified npm provenance.
The repository name does not match the package and its README does not mention it, which creates a small ownership-transparency gap. The organization-owned Storybook monorepo context makes a subpackage mismatch plausible but does not remove the gap entirely.
All 20 workflows were analyzed with no failed files, no untrusted checkouts, no script injections, and all 52 action references pinned. Two high-confidence low-severity adhoc-package findings are minor workflow hygiene concerns.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.