@tiptap/extension-color

Maintainerscaution

Four of six publish-access accounts use the organization domain, while _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain accounts; this is a minor account-hygiene caution, not evidence of a thin maintenance team.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @tiptap/extension-color, which warrants caution about linkage; the repository file tree and organization backing partly support the monorepo explanation.

Workflow auditcaution

All three workflows were analyzed, but the publish workflow has a high-confidence template-injection finding, and all 19 action references are unpinned. The unpinned actions are a caution; the high-confidence publish-workflow finding is the more significant concern.