@tiptap/extension-list-keymap

Maintainerscaution

Six registry publishers are listed and four use the organization domain, but _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain publishing accounts, creating a modest account-hygiene concern. Organization backing and active repository contributors compensate for maintenance-capacity concerns.

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, which is a caution because the linked repository could theoretically be unrelated. The organization-owned monorepo and package README provide some contextual compensation.

Workflow auditcaution

All three workflows were analyzed without failures and have no untrusted checkout or script-injection findings. However, all 19 action references are unpinned, and the publish workflow has high-confidence template-injection plus adhoc-package findings; these are workflow hygiene concerns, not evidence of an unsafe release on their own.