@tiptap/extension-bold

Maintainerscaution

Four of six publishing accounts use the project domain, while _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain accounts. This is an account-hygiene caution, moderated by the organization-backed project and active contributor base.

Repo package mentioncaution

The linked repository name does not match this package and its README does not mention the package, creating some linkage uncertainty. The organization-backed monorepo structure makes a sub-package explanation plausible but does not remove the transparency gap.

Workflow auditcaution

All three workflows were analyzed without untrusted checkouts or script injection, but all 19 action references are unpinned. A high-confidence template-injection finding and high-confidence ad-hoc package installation affect the publish workflow, so workflow hygiene warrants caution.