@tiptap/extension-youtube

Maintainerscaution

Four of six registry publishers use the organization domain, which fits the organization-backed project. The outside-domain accounts _bdbch (bdbch.com) and svenadlung (ueber.io) are an account-hygiene caution, not evidence of limited maintenance capacity.

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, so the package-to-source link is less transparent. The package appears alongside a large monorepo, which partly explains the name mismatch but does not remove the documentation gap.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkout or script-injection findings, but all 19 action references are unpinned and the audit found high-confidence template injection plus an ad hoc package install; these are workflow hygiene concerns rather than evidence that the release itself is unfit.