@storybook/types

Repo package mentioncaution

The repository name does not match this package and its README does not mention @storybook/types, so the package-to-repository relationship is less directly transparent. The organization-owned monorepo context makes a subpackage explanation plausible, but the missing explicit mention remains a caution.

Workflow auditcaution

All 19 workflows were analyzed, all 46 action references are pinned, and there are no untrusted checkouts or script-injection findings. Two high-confidence low-severity adhoc-package findings remain, because workflows install packages outside a lockfile.