Material-UI Lab - Incubator for Material-UI React components.
35%
Total Score
100
63
75
The entire package is deprecated because Material UI v4 no longer receives active development. This is a severe adoption and maintenance concern despite the active source repository.
The package has 135 releases but none in the last 12 months, and its latest release was about four years ago. The historical cadence does not compensate for the prolonged release gap.
The repository name does not match the package and its README does not mention this package, so the package-to-repository relationship is less transparent. The monorepo structure partly explains the name mismatch but not the missing README mention.
The assessed version is still an alpha release, and all recent versions are prereleases. That increases compatibility and support risk for a dependency.
All 17 workflows were analyzed, use read-only permissions, and pin all 37 actions, but five high-confidence template-injection findings remain. Because the findings are not paired with untrusted checkouts or script injection, they are a hygiene concern rather than a standalone severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
clsx Version ^1.0.4 | — | — |
react-is Version ^16.8.0 || ^17.0.0 | — | — |
prop-types Version ^15.7.2 | — | — |
@babel/runtime Version ^7.4.4 | — | — |
@material-ui/utils Version ^4.11.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.