bullet list extension for tiptap
84%
Total Score
healthy
Active organization-backed project with frequent releases and broad contributors, but all workflow actions are unpinned and the package is absent from the repos
Most publishing accounts use the organization domain, but _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain accounts. The organization backing and active contributors partly compensate, but account hygiene is less uniform.
The repository name does not match the package and its README does not mention @tiptap/extension-bullet-list. A monorepo name mismatch is normal, but the missing package reference leaves ownership linkage less transparent.
The audit found all 19 action references unpinned, which weakens build reproducibility; it also reported high-confidence template injection and low-confidence adhoc package installation in publish.yml, warranting workflow review.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.