
Security News
Critical Security Vulnerability in React Server Components
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.
@storybook/addon-onboarding
Advanced tools
This addon provides a guided tour in some of Storybook's features, helping you get to know about the basics of Storybook and learn how to write stories!

This addon comes installed by default in Storybook projects and should trigger automatically. If you want to retrigger the addon, you should make sure that your Storybook still contains the example stories that come when initializing Storybook, and you can then navigate to http://localhost:6006/?path=/onboarding after running Storybook.
This addon serves to provide you a guided experience on the basics of Storybook. Once you are done, the addon is therefore not needed anymore and will not get activated (unless triggered manually), so you can freely remove it. Here's how to do so:
yarn:
yarn remove @storybook/addon-onboarding
npm:
npm uninstall -D @storybook/addon-onboarding
pnpm:
pnpm remove -D @storybook/addon-onboarding
.storybook/main.js fileconst config = {
stories: [
"../stories/**/*.stories.mdx",
"../stories/**/*.stories.@(js|jsx|ts|tsx)",
],
addons: [
- "@storybook/addon-onboarding"
],
};
export default config;
Learn more about Storybook at storybook.js.org.
FAQs
Storybook Onboarding: Help new users learn how to write stories
The npm package @storybook/addon-onboarding receives a total of 1,388,297 weekly downloads. As such, @storybook/addon-onboarding popularity was classified as popular.
We found that @storybook/addon-onboarding demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 12 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.

Research
/Security News
We spotted a wave of auto-generated “elf-*” npm packages published every two minutes from new accounts, with simple malware variants and early takedowns underway.

Security News
TypeScript 6.0 will be the last JavaScript-based major release, as the project shifts to the TypeScript 7 native toolchain with major build speedups.