@tiptap/extension-link

Maintainerscaution

Publishing is primarily backed by the tiptap.dev domain, with an organization-owned project. The outside-domain accounts _bdbch (bdbch.com) and svenadlung (ueber.io) are account-hygiene cautions, not evidence of limited maintenance capacity.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @tiptap/extension-link, creating some uncertainty about package-to-repository correspondence. The organization-owned monorepo structure partly explains the mismatch but does not remove the gap.

Workflow auditcaution

All 19 analyzed action references are unpinned, which weakens build reproducibility. The publish workflow also has a high-confidence template-injection finding; the audit is complete, and no untrusted checkout or script-injection trigger was found to amplify it.