list item extension for tiptap
88%
Total Score
healthy
Active, mature package with strong maintenance evidence, but workflow hygiene and repository linkage need scrutiny.
Four of six publishing accounts use the organization’s tiptap.dev domain, but _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain accounts, creating a minor account-hygiene concern.
The linked repository is a monorepo whose name does not match this sub-package, which is ordinary, but its README does not mention @tiptap/extension-list-item; that weakens direct package-to-repository linkage.
All three workflows were analyzed with no untrusted checkout or script-injection findings, but all 19 action references are unpinned and a high-confidence template-injection finding appears in publish.yml; the audit also reports an adhoc package installation.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.