@tiptap/extension-list

Maintainerscaution

Four of six publishing accounts use the tiptap.dev domain, while _bdbch uses bdbch.com; that outside-domain publishing account is a modest account-hygiene concern, not evidence of limited maintenance capacity.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention @tiptap/extension-list; although a monorepo mismatch is ordinary, this leaves package-to-repository ownership less explicit.

Workflow auditcaution

All three workflows were analyzed without failed files, and no untrusted checkout or script-injection path was found. However, all 19 action references are unpinned, and a high-confidence template-injection finding in publish.yml plus an adhoc package install weaken release-workflow hygiene.