.eslintrc.json

@@ -1,8 +1,5 @@
 {
   "extends": "standard",
-  "plugins": [
-    "standard"
-  ],
   "rules": {
     "semi": ["error", "always"],
     "indent": ["error", 2, {

.github/ISSUE_TEMPLATE.md

@@ -2,9 +2,9 @@
 
 **Markdown flavor:** Markdown.pl|CommonMark|GitHub Flavored Markdown|n/a
 
-<!-- The NPM version or commit hash having the issue --> 
+<!-- The NPM version or commit hash having the issue -->
 
-<!-- 
+<!--
 
 	If submitting something other than a defect with Marked itself, please use the following:
 
@@ -34,7 +34,7 @@
 
 <!-- Describe what code combination got you there -->
 
-<!-- 
+<!--
 	If error is thrown add the following:
 
 ## Call stack & console log

.github/ISSUE_TEMPLATE/Bug_report.md

@@ -1,27 +1,28 @@
----
-name: Bug report
-about: Marked says it does this thing but does not
-
----
-
-**Describe the bug**
-A clear and concise description of what the bug is.
-
-**To Reproduce**
-Steps to reproduce the behavior:
-
-<!-- If possible, use the Marked Demo permalink and compare to the CommonMark Dingus permalink to demonstrate the bug -->
-<!--
-1. [Marked Demo](https://marked.js.org/demo/)
-2. [CommonMark Demo](https://spec.commonmark.org/dingus/)
--->
-
-<!-- If you need a specific version and options to reproduce the bug, use the following template -->
-<!--
-1. Install marked `npm install --save marked@0.3.19` with the version you are using
-2. Run marked with input string and options such as `marked('hello *world*', {gfm: true})`
-3. Actual output (or error) is...
--->
-
-**Expected behavior**
-A clear and concise description of what you expected to happen.
+---
+name: Bug report
+about: Marked says it does this thing but does not
+
+---
+**Marked version:**
+
+**Describe the bug**
+A clear and concise description of what the bug is.
+
+**To Reproduce**
+Steps to reproduce the behavior:
+
+<!-- If possible, use the Marked Demo permalink and compare to the CommonMark Dingus permalink to demonstrate the bug -->
+<!--
+1. [Marked Demo](https://marked.js.org/demo/)
+2. [CommonMark Demo](https://spec.commonmark.org/dingus/)
+-->
+
+<!-- If you need a specific version and options to reproduce the bug, use the following template -->
+<!--
+1. Install marked `npm install --save marked@0.3.19` with the version you are using
+2. Run marked with input string and options such as `marked('hello *world*', {gfm: true})`
+3. Actual output (or error) is...
+-->
+
+**Expected behavior**
+A clear and concise description of what you expected to happen.

.github/ISSUE_TEMPLATE/Feature_request.md

@@ -1,14 +1,14 @@
----
-name: Feature request
-about: Marked doesn't do this thing and I think it should
-
----
-
-**Describe the feature**
-A clear and concise description of what you would like.
-
-**Why is this feature necessary?**
-A clear and concise description of why.
-
-**Describe alternatives you've considered**
-A clear and concise description of any alternative solutions or features you've considered.
+---
+name: Feature request
+about: Marked doesn't do this thing and I think it should
+
+---
+
+**Describe the feature**
+A clear and concise description of what you would like.
+
+**Why is this feature necessary?**
+A clear and concise description of why.
+
+**Describe alternatives you've considered**
+A clear and concise description of any alternative solutions or features you've considered.

.github/ISSUE_TEMPLATE/Proposal.md

@@ -1,11 +1,11 @@
 ---
 name: Proposal
 about: Marked doesn't do this thing and I think it should
- 
+
 ---
- 
+
 **What pain point are you perceiving?.**
 A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
- 
+
 **Describe the solution you'd like**
 A clear and concise description of what you want to happen.

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,8 +1,6 @@
 
 <!--
 
-	If release PR, add ?template=release.md to the PR url to use the release PR template.
-
 	If badging PR, add ?template=badges.md to the PR url to use the badges PR template.
 
 	Otherwise, you are stating this PR fixes an issue that has been submitted; or,
@@ -48,6 +46,5 @@ Describe what code combination got you there
 
 In most cases, this should be a different person than the contributor.
 
-- [ ] Draft GitHub release notes have been updated.
 - [ ] CI is green (no forced merge required).
-- [ ] Merge PR
+- [ ] Squash and Merge PR following [conventional commit guidelines](https://www.conventionalcommits.org/).

.github/PULL_REQUEST_TEMPLATE/badges.md

@@ -6,9 +6,9 @@
 - [ ] Add a badge
 - [ ] Remove a badge
 
-<!-- 
+<!--
 
-	Explain your reasoning behind tagging that person. 
+	Explain your reasoning behind tagging that person.
 
 	Preferably by citing objective examples, like PRs, Issues, and so on.
 
@@ -47,4 +47,4 @@ within 30 days, if you have not indicated which option you are taking one of the
 
 -->
 
-Note: All committers must approve via review before merging, the disapproving committer can simply close the PR.
+Note: All committers must approve via review before merging, the disapproving committer can simply close the PR.

.github/dependabot.yml

@@ -0,0 +1,11 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+  - package-ecosystem: "npm"
+    versioning-strategy: "increase"
+    directory: "/"
+    schedule:
+      interval: "weekly"

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,71 @@
+# For most projects, this workflow file will not need changing; you simply need
+# to commit it to your repository.
+#
+# You may wish to alter this file to override the set of languages analyzed,
+# or to provide custom queries or build logic.
+name: "CodeQL"
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [master]
+  schedule:
+    - cron: '0 9 * * 3'
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+
+    strategy:
+      fail-fast: false
+      matrix:
+        # Override automatic language detection by changing the below list
+        # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python']
+        language: ['javascript']
+        # Learn more...
+        # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v2
+      with:
+        # We must fetch at least the immediate parents so that if this is
+        # a pull request then we can checkout the head.
+        fetch-depth: 2
+
+    # If this run was triggered by a pull request event, then checkout
+    # the head of the pull request instead of the merge commit.
+    - run: git checkout HEAD^2
+      if: ${{ github.event_name == 'pull_request' }}
+
+    # Initializes the CodeQL tools for scanning.
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v1
+      with:
+        languages: ${{ matrix.language }}
+        # If you wish to specify custom queries, you can do so here or in a config file.
+        # By default, queries listed here will override any specified in a config file.
+        # Prefix the list here with "+" to use these queries and those in the config file.
+        # queries: ./path/to/local/query, your-org/your-repo/queries@main
+
+    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
+    # If this step fails, then you should remove it and run the build manually (see below)
+    - name: Autobuild
+      uses: github/codeql-action/autobuild@v1
+
+    # ℹ️ Command-line programs to run using the OS shell.
+    # 📚 https://git.io/JvXDl
+
+    # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
+    #    and modify them (or add more) to build your code if your project
+    #    uses a compiled language
+
+    #- run: |
+    #   make bootstrap
+    #   make release
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v1

.github/workflows/tests.yml

@@ -37,26 +37,30 @@ jobs:
       - name: Lint ✨
         run: npm run test:lint
 
-  Build:
+  Release:
     needs: [Test, Lint]
-    if: github.ref == 'refs/heads/master'
+    if: |
+      github.ref == 'refs/heads/master' &&
+      github.event.repository.fork == false
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
         uses: actions/checkout@v2
       - name: Install Dependencies
         run: npm ci
       - name: Build 🗜️
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           npm run build
           if ! git diff --quiet; then
             git config --global user.email "<>"
             git config --global user.name "MarkedJS bot"
             git commit -am "🗜️ build [skip ci]"
-            git push "https://${GITHUB_ACTOR}:${GITHUB_TOKEN}@github.com/markedjs/marked.git" HEAD:master
           fi
+      - name: Release 🎉
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npx semantic-release
 
   Skip:
     if: contains(github.event.head_commit.message, '[skip ci]')

LICENSE.md

@@ -8,6 +8,7 @@ all code is your original work. `</legalese>`
 
 ## Marked
 
+Copyright (c) 2018+, MarkedJS (https://github.com/markedjs/)
 Copyright (c) 2011-2018, Christopher Jeffrey (https://github.com/chjj/)
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
@@ -30,8 +31,8 @@ THE SOFTWARE.
 
 ## Markdown
 
-Copyright © 2004, John Gruber 
-http://daringfireball.net/ 
+Copyright © 2004, John Gruber
+http://daringfireball.net/
 All rights reserved.
 
 Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

README.md

@@ -8,8 +8,6 @@
 [![gzip size](https://badgen.net/badgesize/gzip/https://cdn.jsdelivr.net/npm/marked/marked.min.js)](https://cdn.jsdelivr.net/npm/marked/marked.min.js)
 [![install size](https://badgen.net/packagephobia/install/marked)](https://packagephobia.now.sh/result?p=marked)
 [![downloads](https://badgen.net/npm/dt/marked)](https://www.npmjs.com/package/marked)
-[![dep](https://badgen.net/david/dep/markedjs/marked?label=deps)](https://david-dm.org/markedjs/marked)
-[![dev dep](https://badgen.net/david/dev/markedjs/marked?label=devDeps)](https://david-dm.org/markedjs/marked?type=dev)
 [![github actions](https://github.com/markedjs/marked/workflows/Tests/badge.svg)](https://github.com/markedjs/marked/actions)
 [![snyk](https://snyk.io/test/npm/marked/badge.svg)](https://snyk.io/test/npm/marked)
 

docs/.eslintrc.json

@@ -1,8 +1,5 @@
 {
   "extends": "standard",
-  "plugins": [
-    "standard"
-  ],
   "parserOptions": {
     "ecmaVersion": 5,
     "sourceType": "script"

docs/AUTHORS.md

@@ -53,12 +53,20 @@ Marked takes an encompassing approach to its community. As such, you can think o
         <small>Release Wrangler; Titan of the test harness; Dr. DevOps</small>
       </td>
       <td align="center" valign="top">
-        &nbsp;
+        <a href="https://github.com/calculuschild">
+          <img width="100" height="100" src="https://github.com/calculuschild.png?s=150">
+        </a>
+        <br>
+        <a href="https://github.com/calculuschild">Trevor Buckner</a>
+        <div>Committer</div>
+        <small>Master of Marked</small>
       </td>
     </tr>
   </tbody>
 </table>
 
+## Contributors
+
 <table>
   <tbody>
     <tr>