@tiptap/extension-text-align

Maintainerscaution

Six registry accounts have publish access, with four using the primary organization domain. Two outside-domain accounts, _bdbch (bdbch.com) and svenadlung (ueber.io), are an account-hygiene caution, while the organization backing provides context.

Repo package mentioncaution

The repository name does not match the package and its README does not mention this package, which weakens package-to-repository traceability. The organization-owned monorepo context partly explains the name mismatch but does not remove the missing README reference.

Workflow auditcaution

The audit found a high-confidence template-injection issue in the publish workflow and all 19 action references are unpinned. There are no untrusted checkouts, script injections, broad top-level writes, or incomplete audit files, but the publish path still needs attention.