@tiptap/extension-character-count

Maintainerscaution

Four of six publishing accounts use the organization domain, while _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain accounts. Organization backing compensates for limited registry-account concentration, but the outside accounts are a minor account-hygiene concern.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention this package. A monorepo explains the name mismatch, but the absence of a README mention leaves a small ownership-transparency gap.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkout or script-injection findings, but all 19 action references are unpinned. The publish workflow also has high-confidence template injection and low-confidence-impact adhoc package installation findings; these are workflow hygiene concerns, not evidence of a compromised release.