@tiptap/extension-code-block-lowlight

Maintainerscaution

Four of six publishing accounts use the clear company domain tiptap.dev, consistent with the organization backing the repository. _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain publishing accounts, creating a modest account-hygiene caution rather than evidence of limited maintenance capacity.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package. Although a monorepo subpackage mismatch can be ordinary, the missing README mention leaves some uncertainty about package-to-repository linkage.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkout or script-injection findings, and permissions are scoped in two workflows. However, all 19 action references are unpinned, and the high-confidence template-injection finding plus an ad hoc package install in the publishing workflow warrant workflow-hygiene caution.