diff --git a/.eslintignore b/.eslintignore
new file mode 100644
index 0000000..364fdec
--- /dev/null
+++ b/.eslintignore
@@ -0,0 +1 @@
+public/
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f86e949..03d1409 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,10 +1,13 @@
 name: ci
-on: [push, pull_request]
+on:
+  push:
+    branches: '*'
+  pull_request:
 jobs:
   build:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
       - uses: actions/setup-node@v1
-      - run: yarn
+      - run: yarn --frozen-lockfile
       - run: yarn lint
diff --git a/.github/workflows/gh-pages.yml b/.github/workflows/gh-pages.yml
index 16fb560..1f0c0aa 100644
--- a/.github/workflows/gh-pages.yml
+++ b/.github/workflows/gh-pages.yml
@@ -1,8 +1,7 @@
 name: gh-pages
 on:
   push:
-    branches:
-      - master
+    branches: master
 jobs:
   deploy:
     runs-on: ubuntu-latest
@@ -11,7 +10,7 @@ jobs:
       - uses: actions/setup-node@v1
         with:
           node-version: 12
-      - run: yarn
+      - run: yarn --frozen-lockfile
       - run: yarn docs
       - uses: peaceiris/actions-gh-pages@v3
         with:
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
new file mode 100644
index 0000000..9c555f0
--- /dev/null
+++ b/.github/workflows/publish.yml
@@ -0,0 +1,18 @@
+name: publish
+on:
+  push:
+    tags: v[0-9]+.[0-9]+.[0-9]+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/setup-node@v1
+        with:
+          node-version: 12
+          registry-url: 'https://registry.npmjs.org'
+      - run: yarn --frozen-lockfile
+      - run: yarn lint
+      - run: npm publish --access public
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}