@tiptap/extension-code-block

Maintainerscaution

Four of six publishing accounts use the organization domain, consistent with organizational backing. _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain accounts, creating a minor account-hygiene concern.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package. That is common for a monorepo subpackage, but it weakens direct package-to-repository traceability.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkout or script-injection findings, and one scopes permissions at job level. However, all 19 action references are unpinned, and the publish workflow has a high-confidence template-injection finding plus an ad hoc package install.