@tiptap/extension-list-item

Maintainerscaution

Four of six publishing accounts use the organization’s tiptap.dev domain, but _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain accounts. Organization backing makes this an account-hygiene concern rather than evidence of limited maintenance capacity.

Repo package mentioncaution

The repository name differs from the package name, which is normal for a monorepo, but its README does not mention this package. That leaves some uncertainty about the package-to-repository linkage.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkout or script-injection trigger findings, but all 19 action references are unpinned and the publish workflow installs a package outside a lockfile. The high-confidence template-injection finding is a hygiene concern here because no dangerous trigger was reported.