@tiptap/extension-text-style

Maintainerscaution

Four of six publishing accounts use the project domain, and the repository is organization-owned. The outside-domain accounts _bdbch (bdbch.com) and svenadlung (ueber.io) are account-hygiene cautions, not evidence of limited maintenance capacity.

Workflow auditcaution

All three workflows were analyzed without failures and have no untrusted checkout or script-injection findings. However, all 19 action references are unpinned, and the publish workflow has high-confidence template-injection and low-confidence hygiene findings; these warrant caution but do not independently make the release unsafe.