storybookjs / storybook
Repository health
Security, maintenance, dependencies and license for storybookjs/storybook.
Security
63 dependencies checked (13 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
OpenSSF Scorecard · 7.2/10
Checks sorted from strongest to weakest.
- No binaries in the repositoryNo binaries found in the repo10/10
- Tests run on pull requests11 out of 11 merged PRs checked by a CI test10/10
- Contributors from several organisations42 different organizations found10/10
- No risky CI workflowsNo dangerous workflow patterns detected10/10
- Automated dependency updatesUpdate tool detected10/10
- License fileLicense file detected10/10
- Recent activity30 commits out of 30 and 11 issue activity out of 30 found in the last 90 days10/10
- Security policySecurity policy file detected10/10
- No known vulnerabilitiesNo vulnerabilities detected10/10
- Code review before merge9 out of last 12 changesets reviewed before merge7/10
- Pinned dependenciesDependency not pinned by hash detected7/10
- OpenSSF best-practices badgeNo badge detected0/10
- Fuzz testingProject is not fuzzed0/10
- Static analysis on commitsSAST tool is not run on all commits0/10
- Least-privilege CI tokensNon read-only tokens detected in GitHub workflows0/10
- Branch protectionScorecard could not run this check.not scored
- Published through a build pipelineNo published package detectednot scored
- Signed releasesNo releases foundnot scored
Maintenance
Outside contributions: 17 of 55 external pull requests merged (89% of those decided), median 1.9 days to merge.From the 85 most recently updated pull requests, bots excluded.
Recent releases
- v11.0.0-alpha.720 Oct 2026 · same day as previous
- v10.6.320 Oct 2026 · 8 days after previous
- v11.0.0-alpha.612 Oct 2026 · same day as previous
- v10.6.212 Oct 2026 · same day as previous
- v9.1.2112 Oct 2026 · same day as previous
Pull requests
- Open
- 26
- 0 stale (60+ days, no update in 30)
- Merged
- 3
- of the 30 latest
- Median time to merge
- 1 day
- From bots
- 5
- not listed below
Open
- #36202 Addons: Reduce a11y report size and retention in Vitestsolp721 · opened 47 days ago
- #36464 Docs: Show Angular JSDoc examples in Descriptionxuu33030 · opened 27 days ago
- #36719 React: Show the wrapped component's name for React.memo in source snippetsdasjideepak · opened 12 days ago
- #36576 Core: Avoid leaking Node types from logger declarationsbarry166 · opened 19 days ago
- #36990 Sidebar: Design QA refinementsMichaelArestad · opened today
Recently merged
- #36964 Svelte: Extend a story of the same file with the extend prop in Svelte CSFJReinhold · merged 22 Oct 2026
- #36959 CI: Combine ci:* labels and add ci:windowsvalentinpalkovic · merged 22 Oct 2026
The 30 most recently updated pull requests.
Top contributors
- kasperpeulen43 commits · 43%
- valentinpalkovic20 commits · 20%
- JReinhold16 commits · 16%
- huang-julien5 commits · 5%
- ndelangen5 commits · 5%
Of the 99 most recent commits.
Issues
- Open
- 1,855
- issues and pull requests, as GitHub counts them
- Median time to close
- 4 days
- from 2 closed of the 23 latest
- Awaiting first reply
- 3
- of 21 open among the 23 latest
- Oldest open
- 9.0 years
Most wanted
- #24443 [Bug]: Stories for multiple components5 reactions · 8 comments
- #24401 [Bug]: Web Components are not supported propperly3 reactions · 14 comments
- #24557 [Bug]: Canvas code examples don't work with angular components that require a template3 reactions · 3 comments
Rates come from the 23 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
License compatibility
Repo license: MIT · 13 deps checked · 0 potential conflicts.