@tiptap/extension-collaboration

Maintainerscaution

Four of six publishing accounts use the primary tiptap.dev domain, but _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain publishing accounts, creating a modest account-hygiene concern; organization backing partly offsets it.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @tiptap/extension-collaboration. A monorepo explains the name mismatch, but the missing README mention leaves the package-to-source relationship less explicit.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkout or script-injection findings, but all 19 action references are unpinned and the audit found a high-confidence template-injection pattern plus an ad hoc package install in publish.yml.