@tiptap/extension-floating-menu

Maintainerscaution

Four of six publishing accounts use the primary tiptap.dev domain, and the organization backing makes the registry maintainer count reasonable; _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain account-hygiene cautions.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @tiptap/extension-floating-menu; although this can occur for a monorepo subpackage, ownership linkage is less explicit.

Workflow auditcaution

All 19 analyzed action references are unpinned, which weakens build reproducibility. The high-confidence template-injection and low-confidence adhoc-packages findings are workflow hygiene concerns, but there are no untrusted checkouts, script injections, or broad top-level write permissions.