@tiptap/extension-bold

Maintainerscaution

Four of six publishing accounts use the organization's primary domain, while _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain accounts; this is a minor account-hygiene caution, not evidence of limited maintenance capacity.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention @tiptap/extension-bold, so the package-to-repository association is less explicit than ideal; the monorepo structure makes a name mismatch understandable.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkouts or script-injection findings, but all 19 action references are unpinned and the publish workflow has a high-confidence template-injection finding plus an ad hoc package install.