@tiptap/starter-kit

Maintainerscaution

Four of six publishing accounts use the clear tiptap.dev domain, consistent with organization-backed publishing. _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain accounts, creating a modest account-continuity concern rather than evidence of limited maintenance capacity.

Repo package mentioncaution

The repository name does not match @tiptap/starter-kit and its README does not mention the package. This is explainable for a monorepo subpackage, but it leaves package-to-repository linkage less explicit.

Workflow auditcaution

All 19 action references are unpinned, which weakens workflow reproducibility. The audit also found a high-confidence template-injection pattern and an adhoc package install in publish.yml; these are automation hygiene concerns, but no untrusted checkout or broad top-level write permission was observed.