Package Health/vite-plugin-storybook-nextjs

vite-plugin-storybook-nextjs

Bundled typings, clear usage guidance, release notes, and npm provenance make integration and publication practices transparent. The repository also has broad organizational support and strong engineering hygiene, though its README does not name this package directly and two workflows install packages outside a lockfile.

Latest 10.6.1

NPM

88%

Total Score

Maintainer Stability

100

Maturity

Supply Chain

Attestations

100

Health Score Breakdown

Repo package mention

The repository name does not match the package name and its README does not mention the package, which creates a provenance and ownership ambiguity. The package README identifies it as part of the Storybook ecosystem, but the supplied signal does not fully resolve that mismatch.

Workflow audit

All 20 workflows were analyzed successfully, all 49 action references are pinned, and no untrusted checkout or script injection was found. Two high-confidence low-severity adhoc-package findings show packages installed outside a lockfile, so workflow hygiene is not perfect but remains a minor concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

ndelangen

valentinpalkovic

Direct Dependencies

Dependency	Last Release	Score
pathe Version ^2.0.3	—	—
semver Version ^7.7.3	—	—
@next/env Version ^15.0.0 \|\| ^16.0.0	—	—
ts-dedent Version ^2.2.0	—	—
magic-string Version ^0.30.11	—	—