@tiptap/extension-bubble-menu

Maintainerscaution

Four publishing accounts use the organization's tiptap.dev domain, but _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain publisher accounts, creating a modest account-hygiene concern.

Repo package mentioncaution

The repository name differs from the package name and its README does not mention this package. That can be normal for a monorepo, but the absence of a README mention leaves some uncertainty that the linked repository specifically represents this package.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkout or script-injection findings, but all 19 action references are unpinned; the audit also found high-confidence template injection and an ad hoc package install in the publish workflow.