React components that implement Google's Material Design.
20%
Total Score
critical
Unfit to use: npm marks the package deprecated and its last release was over four years ago.
NPM marks the entire package deprecated because Material UI v4 has received no active development since September 2021. This directly indicates that depending on this release carries substantial abandonment and maintenance risk.
The latest registry release was on April 3, 2022, with no releases in the last 12 months despite a previously frequent median interval of about 7 days. The long pause is strong evidence that this release line is no longer maintained.
All 17 workflows were analyzed, all 37 action references are pinned, and permissions are read-only; however, five high-confidence template-injection findings remain. With no untrusted checkouts or script-injection findings, this is a workflow-hygiene caution rather than a standalone severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
clsx Version ^1.0.4 | — | — |
react-is Version ^16.8.0 || ^17.0.0 | — | — |
popper.js Version 1.16.1-lts | — | — |
prop-types Version ^15.7.2 | — | — |
@babel/runtime Version ^7.4.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.