@tiptap/extension-blockquote

Maintainerscaution

Six accounts can publish, with four using the organization's tiptap.dev domain. _bdbch and svenadlung use outside domains, which is a minor account-hygiene concern, while the organization backing compensates for a thin registry list.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention @tiptap/extension-blockquote, so the package-to-repository link is less transparent. The organization and monorepo structure partly explain the mismatch but do not remove the gap.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkout or script-injection trigger, and permissions are not broadly writable. However, all 19 action references are unpinned, and the high-confidence template-injection and adhoc-packages findings in publish.yml warrant workflow review.