@tiptap/extension-code-block

Maintainerscaution

Four of six registry publishing accounts use the organization domain, but _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain accounts; this is a modest account-hygiene concern, not evidence of a thin maintenance team.

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention @tiptap/extension-code-block. This can be normal for a monorepo, but the missing explicit mention leaves package ownership less transparent.

Workflow auditcaution

All three workflows were analyzed without failures, but all 19 action references are unpinned. The high-confidence template-injection finding and low-confidence adhoc-package finding are hygiene concerns; with no untrusted trigger or checkout sink, they do not establish a severe risk.