The package is well documented and the current release includes specific release notes. The source is actively maintained, backed by an organization, and has repository tests and security tooling. Maintenance is concentrated in one contributor, and all eight workflow actions are unpinned.
80%
Total Score
83
100
100
100
One contributor made all six recent commits, creating a genuine single-person continuity risk. Organization backing partly compensates because maintenance can potentially be handed off.
Both workflows were analyzed successfully with no reported audit findings or untrusted checkouts. However, all eight action references are unpinned and one workflow grants top-level write permissions, creating moderate workflow hygiene risk without a dangerous trigger or sink.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tiny-blocks/mapper Version ^3.2 | — | — |
tiny-blocks/collection Version ^2.6 | — | — |
tiny-blocks/value-object Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.