@tiptap/extension-history

Maintainerscaution

Four of six publishing accounts use the organization domain, and the organization backing provides continuity; _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain publishing accounts, creating a minor account-hygiene concern.

Repo package mentioncaution

The package is a subpackage of a monorepo, so the repository name mismatch is ordinary; however, the README does not mention this package, leaving a minor transparency gap about the exact package-to-repository link.

Workflow auditcaution

All 19 action references are unpinned, which is a workflow reproducibility and supply-chain hygiene concern. The audit also found a high-confidence template-injection pattern and an unlocked package installation in publish.yml; these are hygiene risks, while no untrusted checkout or script-injection sink was reported.