chore: repo hygiene pass (keywords, gitignore, codeql, metadata)

- package.json keywords broadened from `jquery-plugin` alone to ten
  additional terms (jquery, autocomplete, typeahead, suggest,
  suggestions, combobox, dropdown, input, search, ajax). Fixes very
  poor npm-search discoverability.
- package.json author URL switched from twitter.com to github.com
  (matches LICENSE attribution; durable across the Twitter/X rename).
- package.json repository.url switched from the deprecated `git://`
  protocol to `git+https://`.
- .gitignore broadened from `/node_modules` only to also cover common
  editor/IDE artifacts (.vscode/, .idea/, *.swp), OS junk (.DS_Store,
  Thumbs.db), and report folders (*.log, /coverage). Prevents
  contributors with default IDE setups from silently committing junk.
- New .github/workflows/codeql.yml — CodeQL static analysis on push,
  PR, and a weekly Monday cron, using the `security-and-quality`
  query suite over the `javascript-typescript` language. `dist/` is
  excluded (re-emitted from src/, scanning it double-reports);
  `docs/scripts/countries.js` is excluded (long ISO-code data file
  with no logic to analyze).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: tkirda-bison

.github/workflows/codeql.yml

@@ -0,0 +1,50 @@
+name: CodeQL
+
+# Runs on every push to master, every PR into master, and weekly so a
+# drift in transitive deps or pattern catalogs doesn't go undetected.
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+    branches: [master]
+  schedule:
+    - cron: "0 6 * * 1"   # Mondays at 06:00 UTC
+
+jobs:
+  analyze:
+    name: Analyze (${{ matrix.language }})
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [javascript-typescript]
+
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: ${{ matrix.language }}
+          queries: security-and-quality
+          # `dist/` is generated output (re-emitted from `src/` on every
+          # build); scanning it would just double-report findings.
+          config: |
+            paths-ignore:
+              - dist
+              - docs/scripts/countries.js
+
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v3
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3
+        with:
+          category: "/language:${{ matrix.language }}"

.gitignore

@@ -1 +1,18 @@
 /node_modules
+
+# editor / IDE
+.vscode/
+.idea/
+*.swp
+*.swo
+
+# OS junk
+.DS_Store
+Thumbs.db
+
+# logs and reports
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+/coverage

package.json

@@ -3,7 +3,7 @@
   "version": "2.0.2",
   "description": "Autocomplete provides suggestions while you type into the text field.",
   "homepage": "https://github.com/devbridge/jQuery-Autocomplete",
-  "author": "Tomas Kirda (https://twitter.com/tkirda)",
+  "author": "Tomas Kirda (https://github.com/tkirda)",
   "main": "dist/jquery.autocomplete.js",
   "module": "dist/jquery.autocomplete.esm.js",
   "types": "dist/index.d.ts",
@@ -16,7 +16,17 @@
   },
   "license": "MIT",
   "keywords": [
-    "jquery-plugin"
+    "jquery-plugin",
+    "jquery",
+    "autocomplete",
+    "typeahead",
+    "suggest",
+    "suggestions",
+    "combobox",
+    "dropdown",
+    "input",
+    "search",
+    "ajax"
   ],
   "scripts": {
     "build": "node scripts/build.mjs",
@@ -32,7 +42,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "git://github.com/devbridge/jQuery-Autocomplete.git"
+    "url": "git+https://github.com/devbridge/jQuery-Autocomplete.git"
   },
   "peerDependencies": {
     "jquery": ">=3.0"