npm package report
Is eslint-plugin-storybook safe?
Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.
npm packagelast checked 2026-09-19
eslint-plugin-storybook · verdict ALERT · review advised
4.0/10
XYZ SCORE
SUMMARY
Verdict ALERT · 0 graph-tracked dependencies · provenance: verified (sigstore)
Commit-Level AnalysistriggeredHIGH
{"is_malicious": true, "confidence": 0.85, "attack_pattern": "gradual_backdoor", "categories": ["build_system", "exfiltration"], "commits_involved": 5, "reasoning": "Multiple individually low-severity signals across 5 commits combine into a gradual_backdoor pattern. This matches
PACKAGE eslint-plugin-storybookECOSYSTEM npmDECISION ALERT
Package facts
Weekly downloads
37.6M
GitHub stars
89k
Centrality tier
tier 1
Build provenance
verified (sigstore)
Direct dependencies
0
History on this package: popular package (1307 versions over 107d) with pattern-only evidence — de-escalated for review rather than blocked
Baked snapshot · run a live check for the current verdict · browse all packages