@tiptap/extension-ordered-list

Maintainerscaution

Four of six registry publishing accounts use the primary tiptap.dev domain, but _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain publishing accounts, creating a modest account-hygiene concern.

Repo package mentioncaution

The repository name does not match this package and its README does not mention it; although a monorepo mismatch is ordinary, the lack of a README reference leaves package ownership less explicit.

Workflow auditcaution

The audit found a high-confidence template-injection issue in publish.yml and all 19 action references are unpinned; the absence of untrusted checkouts and broad top-level write permissions partly limits the risk.