@tiptap/extension-document

Maintainerscaution

Four of six registry publishers use the organization's tiptap.dev domain, while _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain accounts. The organization backing and active contributor base compensate for this account-hygiene concern, but those accounts remain a minor caution.

Repo package mentioncaution

The repository name does not match this package and its README does not mention @tiptap/extension-document. Because the repository is an organization-owned Tiptap monorepo, the name mismatch is expected, but the missing package mention leaves a small identity-transparency gap.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkout or script-injection trigger, and one workflow scopes permissions read-only. However, all 19 action references are unpinned, and the audit found high-confidence template-injection and low-confidence build package-installation hygiene issues; these are concerns but not independently severe for package health.