@tiptap/extension-paragraph

Maintainerscaution

Four of six publishing accounts use the organization domain, consistent with the organization-backed project. _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain publishing accounts, which is a minor account-hygiene concern rather than evidence of limited maintenance capacity.

Repo package mentioncaution

The repository name does not match this package and its README does not mention @tiptap/extension-paragraph. This can be normal for a monorepo, but it leaves the package-to-repository relationship less explicit.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkout or script-injection triggers, and one workflow scopes permissions at job level. However, all 19 action references are unpinned, and the high-confidence template-injection finding plus an ad hoc package install in publish.yml warrant workflow review.