Both versions 9.0.2 and 9.0.3 of the @storybook/addon-actions npm package from the Storybook ecosystem are essentially placeholder releases, explicitly marked as empty packages intended for developers to avoid. The core metadata, including the license (MIT), repository location on GitHub, and funding information via Open Collective, remains identical across these two versions. Similarly, the dist object specifying details about the packaged tarball shows no functional difference; both versions have a fileCount of 10 and unpackedSize of 3350 bytes, suggesting they contain minimal or no actual code. The purpose is likely internal to the Storybook team, perhaps related to dependency management or a migration strategy.
The only discernible difference lies in their release dates, with version 9.0.3 being published approximately 14 hours later than 9.0.2 (May 31, 2025, at 23:38:05.700Z versus 09:58:23.598Z). From a developer's perspective, there's no practical reason to choose one over the other, as the package's description explicitly warns against their use. Focus should instead be directed towards actively supported Storybook addons. Ignoring this notice may lead to unexpected behavior or missing required functionalities. Update to a supported addon version or remove this addon to avoid confusion.
The are not vulnerabilities for the version 9.0.3 of the package @storybook/addon-actions