@storybook/source-loader 6.5.0

Source loader

@storybook/source-loader@6.5.0 was published on 2022-05-18. Its manifest declares 10 runtime dependencies and 2 peer requirements. Type declarations are bundled according to the package metadata. No Node.js engine requirement is declared in this manifest.

All @storybook/source-loader versions · Permanent reference to 6.5.0 · Latest release

Package specifications

Version	6.5.0
License declaration	MIT
Published	2022-05-18T16:28:37.730Z
Node.js requirement	Not declared
Type declarations	Bundled declarations
Runtime dependency count	10
Peer requirement count	2
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	106.29 KiB
Published file count	53
Package type	Not declared
ES module entry	dist/esm/index.js
Default entry	dist/cjs/index.js
Side effects declaration	false
Direct advisories	0
Resolved graph dependencies	59
Repository stars	91404
Repository forks	10479

Install @storybook/source-loader 6.5.0

npm install @storybook/source-loader@6.5.0
pnpm add @storybook/source-loader@6.5.0
yarn add @storybook/source-loader@6.5.0

Runtime dependencies

global ^4.4.0
lodash ^4.17.21
core-js ^3.8.2
prettier >=2.2.1 <=2.3.0
estraverse ^5.2.0
loader-utils ^2.0.0
@storybook/csf 0.0.2--canary.4566f4d.1
@storybook/addons 6.5.0
regenerator-runtime ^0.13.7
@storybook/client-logger 6.5.0

Peer requirements

react ^16.8.0 || ^17.0.0 || ^18.0.0
react-dom ^16.8.0 || ^17.0.0 || ^18.0.0

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@storybook/addons@6.5.0 — direct
@storybook/api@6.5.0 — indirect
@storybook/channels@6.5.0 — indirect
@storybook/client-logger@6.5.0 — direct
@storybook/core-events@6.5.0 — indirect
@storybook/csf@0.0.2--canary.4566f4d.1 — direct
@storybook/router@6.5.0 — indirect
@storybook/semver@7.3.2 — indirect
@storybook/theming@6.5.0 — indirect
@types/is-function@1.0.3 — indirect
@types/webpack-env@1.18.8 — indirect
async-function@1.0.0 — indirect
async-generator-function@1.0.0 — indirect
big.js@5.2.2 — indirect
call-bind-apply-helpers@1.0.2 — indirect
call-bound@1.0.4 — indirect
core-js@3.51.0 — direct
dom-walk@0.1.2 — indirect
dunder-proto@1.0.1 — indirect
emojis-list@3.0.0 — indirect
es-define-property@1.0.1 — indirect
es-errors@1.3.0 — indirect
es-object-atoms@1.1.2 — indirect
estraverse@5.3.0 — direct
fast-deep-equal@3.1.3 — indirect
find-up@4.1.0 — indirect
function-bind@1.1.2 — indirect
generator-function@2.0.1 — indirect
get-intrinsic@1.3.1 — indirect
get-proto@1.0.1 — indirect
global@4.4.0 — direct
gopd@1.2.0 — indirect
has-symbols@1.1.0 — indirect
has-tostringtag@1.0.2 — indirect
hasown@2.0.4 — indirect
is-function@1.0.2 — indirect
is-regex@1.2.1 — indirect
is-symbol@1.1.1 — indirect
isobject@4.1.1 — indirect
json5@2.2.3 — indirect
loader-utils@2.0.4 — direct
locate-path@5.0.0 — indirect
lodash@4.18.1 — direct
map-or-similar@1.5.0 — indirect
math-intrinsics@1.1.0 — indirect
memoizerific@1.11.3 — indirect
min-document@2.19.2 — indirect
p-limit@2.3.0 — indirect
p-locate@4.1.0 — indirect
p-try@2.2.0 — indirect
path-exists@4.0.0 — indirect
prettier@2.3.0 — direct
process@0.11.10 — indirect
regenerator-runtime@0.13.11 — direct
safe-regex-test@1.1.0 — indirect
store2@2.14.4 — indirect
telejson@6.0.8 — indirect
ts-dedent@2.3.0 — indirect
util-deprecate@1.0.2 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Maintained	10/10 — 30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10
Code-Review	10/10 — all changesets reviewed
Security-Policy	10/10 — security policy file detected
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	0/10 — dangerous workflow patterns detected
Token-Permissions	6/10 — detected GitHub workflow tokens with excessive permissions
License	10/10 — license file detected
Binary-Artifacts	10/10 — no binaries found in the repo
Pinned-Dependencies	9/10 — dependency not pinned by hash detected -- score normalized to 9
Branch-Protection	2/10 — branch protection is not maximal on development and all release branches
Fuzzing	0/10 — project is not fuzzed
SAST	10/10 — SAST tool is run on all commits

Evidence and freshness

https://registry.npmjs.org/%40storybook%2Fsource-loader/6.5.0 — retrieved 2026-10-29T18:25:47.512Z
https://api.deps.dev/v3/systems/npm/packages/%40storybook%2Fsource-loader/versions/6.5.0:dependencies — retrieved 2026-10-29T18:25:48.191Z
https://api.deps.dev/v3/systems/npm/packages/%40storybook%2Fsource-loader/versions/6.5.0 — retrieved 2026-10-29T18:25:48.140Z (stale snapshot; refresh pending)
https://api.deps.dev/v3/projects/github.com%2Fstorybookjs%2Fstorybook — retrieved 2026-10-29T18:22:26.227Z