@tiptap/extension-mention

Maintainerscaution

Four of six publishing accounts use the organization domain, but _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain publisher accounts, creating a minor account-hygiene concern.

Repo package mentioncaution

The repository name does not match @tiptap/extension-mention and its README does not mention the package. This is more concerning than a simple monorepo name mismatch because the package-to-repository relationship is not explicit.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkout or script-injection findings, but all 19 action references are unpinned. A high-confidence template-injection finding and an ad hoc package install in the publish workflow add workflow hygiene risk.