Is @carbon/react safe to use?

@carbon/react has no known vulnerabilities on the latest version (1.106.0). DepScope rates its health at 69/100 (moderate risk).

What is the latest version of @carbon/react?

The latest version of @carbon/react is 1.106.0, released 2026-04-22.

Does @carbon/react have known vulnerabilities?

No known vulnerabilities on the latest version of @carbon/react.

Is @carbon/react deprecated?

No, @carbon/react is actively maintained. Latest release: 1.106.0 (2026-04-22).

What are alternatives to @carbon/react?

Popular alternatives to @carbon/react in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @carbon/react use?

@carbon/react is licensed under Apache-2.0.

@carbon/react

npmv1.106.0

React components for the Carbon Design System

License Apache-2.0permissive300 versions3 maintainers17 deps

carbon-design-system/carbon

/ 100

Health

use with caution

@carbon/[email protected] low health (69/100) — consider alternatives

Moderate health score (69/100) — verify manually

Health breakdown0 – 100

25/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (17)

tabbable downshift flatpickr invariant classnames es-toolkit prop-types @babel/runtime @carbon/layout @carbon/styles @carbon/utilities @ibm/telemetry-js copy-to-clipboard @floating-ui/react react-fast-compare @carbon/icons-react @carbon/feature-flags

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@carbon/react

@carbon/react

npmv1.106.0

React components for the Carbon Design System

License Apache-2.0permissive300 versions3 maintainers17 deps

carbon-design-system/carbon

/ 100

Health

use with caution

@carbon/[email protected] low health (69/100) — consider alternatives

Moderate health score (69/100) — verify manually

Health breakdown0 – 100

25/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (17)

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@carbon/react