@tiptap/extension-node-range

Maintainerscaution

Four of six publishing accounts use the organization's tiptap.dev domain, but _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain publisher accounts and add account-hygiene caution.

Repo package mentioncaution

The repository name does not match this sub-package and its README does not mention the package, creating some uncertainty about package-to-repository linkage; the monorepo structure partly explains the name mismatch but not the absent mention.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkout or script-injection findings, but all 19 action references are unpinned and the publish workflow has a high-confidence template-injection finding; these are workflow hygiene concerns, not evidence of maliciousness.