Package Health

@material-ui/lab

Material-UI Lab - Incubator for Material-UI React components.

Latest 4.0.0-alpha.61NPMNPM

35%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

63

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Registry deprecationdanger

The entire package is deprecated because Material UI v4 no longer receives active development. This is a severe adoption and maintenance concern despite the active source repository.

Release historydanger

The package has 135 releases but none in the last 12 months, and its latest release was about four years ago. The historical cadence does not compensate for the prolonged release gap.

Repo package mentioncaution

The repository name does not match the package and its README does not mention this package, so the package-to-repository relationship is less transparent. The monorepo structure partly explains the name mismatch but not the missing README mention.

Version stabilitycaution

The assessed version is still an alpha release, and all recent versions are prereleases. That increases compatibility and support risk for a dependency.

Workflow auditcaution

All 17 workflows were analyzed, use read-only permissions, and pin all 37 actions, but five high-confidence template-injection findings remain. Because the findings are not paired with untrusted checkouts or script injection, they are a hygiene concern rather than a standalone severe risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Direct Dependencies

DependencyLast ReleaseScore
clsx
Version ^1.0.4
—
—
react-is
Version ^16.8.0 || ^17.0.0
—
—
prop-types
Version ^15.7.2
—
—
@babel/runtime
Version ^7.4.4
—
—
@material-ui/utils
Version ^4.11.3
—
—

Weekly Downloads

Info

Last Published
4 years ago
Created
8 years ago
Unpacked Size
1.3 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform