@tiptap/extension-typography

Maintainerscaution

Four of six publish accounts use the organization domain, while _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain accounts; this is a minor account-hygiene caution, moderated by organization backing.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, which is a caution under the package-ownership check, although the organization-backed repository and package tree indicate a broader project structure.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkout or script-injection findings, but all 19 action references are unpinned; the publish workflow also has high-confidence template-injection and low-confidence-impact adhoc-package findings, so workflow hygiene warrants caution.