[Consolidated tools]: List of tools to help improve development of marked

[joshbruce]

Inspired by a conversation in #1058 referencing this tool:

We've been talking about various tools we would like to use to improve quality, stability, and security...thought it might be nice to have a place to consolidate and discuss.

• https://github.com/marketplace/travis-ci
• https://github.com/NicolaasWeideman/RegexStaticAnalysis

[Feder1co5oave]

If we can make this work correctly, we MUST include it in CI!

edit: why have you linked travis?

[Feder1co5oave]

I can't find ANY documentation for that tool 😐

[joshbruce]

Which one can’t you find documentation on?

Linked because we plan to use it. 😁

This might be a horrible issue to start. Would like to flag all the tool (or methodology) mentions like we’ve been doing the other ones...like the AMD thing.

[UziTech]

We could try an eslint plugin for regex security eslint-plugin-security

Never used it but it looks like it might be useful.

[Feder1co5oave]

Looks like eslint-plugin-security uses safe-regex

[joshbruce]

I like this idea of checking security of regex. Which would be easier to get up on and include with the Travis CI stuff?? Should we consider both as options??

[joshbruce]

https://regexper.com - This is intriguing.

[joshbruce]

@UziTech: Thinking about closing this one as part of #1120 but there seem to be a couple of tools related to DevOps that we may still want to consider.

[UziTech]

We don't need this open to find it