@tiptap/extension-task-item

Maintainerscaution

Four of six publishing accounts use the organization domain, while _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain accounts; organization backing compensates for the account-hygiene concern, but those identities remain a mild caution.

Repo package mentioncaution

The repository name does not match this scoped package and its README does not mention it. A monorepo name mismatch is ordinary, but the missing package mention leaves some uncertainty about repository-to-package traceability.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkout or script-injection findings, but all 19 action references are unpinned and the publish workflow has high-confidence template-injection and high-confidence ad hoc-package findings; these are workflow hygiene risks rather than standalone unfitness.