@tiptap/extension-text

Maintainerscaution

Four of six publish-access accounts use the organization's tiptap.dev domain, while _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain accounts; this is a minor account-hygiene concern, moderated by organization backing.

Repo package mentioncaution

The repository name does not match @tiptap/extension-text and its README does not mention that package; this is a monorepo identity-hygiene gap, though the organization-backed repository context partly offsets it.

Workflow auditcaution

All 19 analyzed action references are unpinned, and the audit found high-confidence template-injection and low-confidence-style adhoc-package hygiene findings in publish.yml. No untrusted checkout, script-injection, dangerous trigger, or top-level write permission was reported, so this is a caution rather than a severe risk.