@tiptap/extension-hard-break

Maintainerscaution

Four of six publishing accounts use the organization domain, while _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain accounts; with clear organization backing, this is a mild account-hygiene concern rather than a maintenance-capacity concern.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, creating some uncertainty about the link; the large repository file tree is consistent with a monorepo, which partly offsets that concern.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkout or script-injection trigger, but all 19 action references are unpinned and a high-confidence template-injection finding appears in publish.yml; these are workflow hygiene concerns, not standalone evidence that the release is unsafe.