@tiptap/extension-blockquote

Maintainerscaution

Four of six registry publishers use the project's tiptap.dev domain, while _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain accounts; the organization backing makes the latter an account-hygiene caution rather than evidence of weak maintenance capacity.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, which is a caution; however, the package file tree and organization-backed monorepo context make a subpackage layout plausible.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkout or script-injection trigger paths, but all 19 action references are unpinned. The high-confidence template-injection finding and low-confidence-independent adhoc package installation in publish.yml warrant workflow hygiene attention.