@tiptap/extension-table-cell

Maintainerscaution

Four of six publishing accounts use the organization's tiptap.dev domain, consistent with organization backing. _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain accounts, creating a modest account-hygiene concern rather than evidence of limited maintenance capacity.

Workflow auditcaution

All 19 analyzed action references are unpinned, and the publish workflow installs a package outside a lockfile, creating workflow reproducibility and supply-chain hygiene concerns. A high-confidence template-injection finding also warrants review, although no untrusted checkout or dangerous trigger was observed and permissions are partly scoped.