npm audit, start with publish workflow

Author: jrieken

.github/workflows/publish.yml

@@ -0,0 +1,19 @@
+name: "build & deploy"
+on:
+  push:
+    tags:
+      - "v*"
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/setup-node@v2
+        with:
+          node-version: '14.x'
+      - run: npm install
+      - run: npm run typecheck
+      - run: npm run integration-test
+      - run: npm run deploy -- -p ${{secrets.MARKETPLACE_PAT}}