Yaroslav Gusev

Changed trigger from **"pull_request"** to **"pull_request_target"**, which will grant write permissions and secrets to workflow (even from **forks**). Documented this warning in the code: ``` Caution: the use of "pull_request_target"...

Npm-publish workflow now makes a call for a reusable workflow in other repo.

Now npm-publish makes a call to reusable workflow in other repo