npm / @storybook/addon-onboarding
@storybook/addon-onboarding
What changed in @storybook/addon-onboarding 8 to 10, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-27.
2 security1 behavior and defaults
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli init@storybook/addon-onboarding 102 changes
Security 2
Storybook dev server vulnerable to code injection from the local network
Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites
@storybook/addon-onboarding 81 changes
Behavior and default changes 1
Non-React projects no longer require React when using Storybook.