prebid.js 10.17.0 → 10.18.0

package/.github/actions/install-deb/action.yml

@@ -0,0 +1,35 @@
+name: Install deb
+description: Download and install a .deb package
+inputs:
+  url:
+    description: URL to the .deb file
+    required: true
+  name:
+    description: A local name for the package. Required if using this action multiple times in the same context.
+    default: package.deb
+    required: false
+
+runs:
+  using: 'composite'
+  steps:
+    - name: Restore deb
+      id: deb-restore
+      uses: actions/cache/restore@v4
+      with:
+        path: "${{ runner.temp }}/${{ inputs.name }}"
+        key: ${{ inputs.url }}
+    - name: Download deb
+      if: ${{ steps.deb-restore.outputs.cache-hit != 'true'  }}
+      shell: bash
+      run: |
+        wget --no-verbose "${{ inputs.url }}" -O "${{ runner.temp }}/${{ inputs.name }}"
+    - name: Cache deb
+      if: ${{ steps.deb-restore.outputs.cache-hit != 'true' }}
+      uses: actions/cache/save@v4
+      with:
+        path: "${{ runner.temp }}/${{ inputs.name }}"
+        key: ${{ inputs.url }}
+    - name: Install deb
+      shell: bash
+      run: |
+        sudo apt-get install -y --allow-downgrades "${{ runner.temp }}/${{ inputs.name }}"

package/.github/actions/npm-ci/action.yml

@@ -0,0 +1,23 @@
+name: NPM install
+description: Run npm install and cache dependencies
+
+runs:
+  using: 'composite'
+  steps:
+    - name: Restore dependencies
+      id: restore-modules
+      uses: actions/cache/restore@v4
+      with:
+        path: "node_modules"
+        key: node_modules-${{ hashFiles('package-lock.json') }}
+    - name: Run npm ci
+      if: ${{ steps.restore-modules.outputs.cache-hit != 'true'  }}
+      shell: bash
+      run: |
+        npm ci
+    - name: Cache dependencies
+      if: ${{ steps.restore-modules.outputs.cache-hit != 'true' }}
+      uses: actions/cache/save@v4
+      with:
+        path: "node_modules"
+        key: node_modules-${{ hashFiles('package-lock.json') }}

package/.github/actions/wait-for-browserstack/action.yml

@@ -1,6 +1,9 @@
 name: Wait for browserstack sessions
 description: Wait until enough browserstack sessions have become available
-
+inputs:
+  sessions:
+    description: Number of sessions needed to continue
+    default: "6"
 runs:
   using: 'composite'
   steps:
@@ -14,7 +17,7 @@ runs:
           queued=$(jq '.queued_sessions' <<< $status)
           max_queued=$(jq '.queued_sessions_max_allowed' <<< $status)
           spare=$(( ${max_running} + ${max_queued} - ${running} - ${queued} ))
-          required=6
+          required=${{ inputs.sessions }}
           echo "Browserstack status: ${running} sessions running, ${queued} queued, ${spare} free"
           (( ${required} > ${spare} ))
         do

package/.github/workflows/PR-assignment.yml

@@ -0,0 +1,60 @@
+name: Assign PR reviewers
+on:
+  pull_request_target:
+    types: [opened, synchronize, reopened]
+
+jobs:
+  assign_reviewers:
+    name: Assign reviewers
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Generate app token
+        id: token
+        uses: actions/create-github-app-token@v2
+        with:
+          app-id: ${{ vars.PR_BOT_ID }}
+          private-key: ${{ secrets.PR_BOT_PEM }}
+
+      - name: Checkout
+        uses: actions/checkout@v5
+        with:
+          ref: refs/pull/${{ github.event.pull_request.number }}/head
+
+      - name: Install dependencies
+        uses: ./.github/actions/npm-ci
+      - name: Build
+        run: |
+          npx gulp build
+      - name: Install s3 client
+        run: |
+          npm install @aws-sdk/client-s3
+      - name: Get PR properties
+        id: get-props
+        uses: actions/github-script@v8
+        env:
+          AWS_ACCESS_KEY_ID: ${{ vars.PR_BOT_AWS_AK }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.PR_BOT_AWS_SAK }}
+        with:
+          github-token: ${{ steps.token.outputs.token }}
+          script: |
+            const getProps = require('./.github/workflows/scripts/getPRProperties.js')
+            const props = await getProps({
+              github, 
+              context, 
+              prNo: ${{ github.event.pull_request.number }},
+              reviewerTeam: '${{ vars.REVIEWER_TEAM }}',
+              engTeam: '${{ vars.ENG_TEAM }}',
+              authReviewTeam: '${{ vars.AUTH_REVIEWER_TEAM }}'
+            });
+            console.log('PR properties:', JSON.stringify(props, null, 2));
+            return props;
+      - name: Assign reviewers
+        if: ${{ !fromJSON(steps.get-props.outputs.result).review.ok }}
+        uses: actions/github-script@v8
+        with:
+          github-token: ${{ steps.token.outputs.token }}
+          script: |
+            const assignReviewers = require('./.github/workflows/scripts/assignReviewers.js')
+            const reviewers = await assignReviewers({github, context, prData: ${{ steps.get-props.outputs.result }} });
+            console.log('Assigned reviewers:', JSON.stringify(reviewers, null, 2));

package/.github/workflows/browser-tests.yml

@@ -1,29 +1,10 @@
 name: Run unit tests on all browsers
 on:
   workflow_call:
-    inputs:
-      chunks:
-        description: Number of chunks to split tests into
-        required: false
-        type: number
-        default: 1
-      build-cmd:
-        description: Build command, run once
-        required: false
-        type: string
-      test-cmd:
-        description: Test command, run once per chunk
-        required: true
-        type: string
-      timeout:
-        description: Timeout on test run
-        required: false
-        type: number
-        default: 10
     outputs:
       coverage:
         description: Artifact name for coverage results
-        value: ${{ jobs.browser-tests.outputs.coverage }}
+        value: ${{ jobs.unit-tests.outputs.coverage }}
     secrets:
       BROWSERSTACK_USER_NAME:
         description: "Browserstack user name"
@@ -33,15 +14,17 @@ jobs:
   build:
     uses: ./.github/workflows/build.yml
     with:
-      build-cmd: ${{ inputs.build-cmd }}
+      build-cmd: npx gulp build
 
   setup:
     needs: build
-    name: "Setup environment"
+    name: "Define testing strategy"
     runs-on: ubuntu-latest
     outputs:
       browsers: ${{ toJSON(fromJSON(steps.define.outputs.result).browsers) }}
+      latestBrowsers: ${{ toJSON(fromJSON(steps.define.outputs.result).latestBrowsers) }}
       bstack-key: ${{ steps.bstack-save.outputs.name }}
+      bstack-sessions: ${{ fromJSON(steps.define.outputs.result).bsBrowsers }}
     steps:
       - name: Checkout
         uses: actions/checkout@v5
@@ -55,23 +38,35 @@ jobs:
         with:
           script: |
             const fs = require('node:fs/promises');
-            const browsers = require('./.github/workflows/browser_testing.json');
-            const excludeFromBstack = Object.values(browsers).map(browser => browser.bsName);
+            const browsers = Object.entries(
+              require('./.github/workflows/browser_testing.json')
+            ).flatMap(([name, browser]) => {
+              browser = Object.assign({name, version: 'latest'}, browser);
+              const browsers = [browser];
+              const versions = browser.versions;
+              if (versions) {
+                 delete browser.versions;
+                 browsers.push(...Object.entries(versions).map(([version, def]) => Object.assign({}, browser, {version, ...def})))
+              }
+              return browsers;
+            })
             const bstackBrowsers = Object.fromEntries(
-              // exlude "latest" version of browsers that we can test on GH actions
+              // exclude versions of browsers that we can test on GH actions
               Object.entries(require('./browsers.json'))
-              .filter(([name, def]) => !excludeFromBstack.includes(def.browser) || def.browser_version !== 'latest')
+              .filter(([name, def]) => browsers.find(({bsName, version}) => bsName === def.browser && version === def.browser_version) == null)
             )
             const updatedBrowsersJson = JSON.stringify(bstackBrowsers, null,  2);
             console.log("Using browsers.json:", updatedBrowsersJson);
+            console.log("Browsers to be tested directly on runners:", JSON.stringify(browsers, null, 2))
             await fs.writeFile('./browsers.json', updatedBrowsersJson);
             return {
-              hasBSBrowsers: Object.keys(bstackBrowsers).length > 0,
-              browsers: Object.entries(browsers).map(([name, def]) => Object.assign({name}, def))
+              bsBrowsers: Object.keys(bstackBrowsers).length,
+              browsers,
+              latestBrowsers: browsers.filter(browser => browser.version === 'latest') 
             }
       - name: "Save working directory"
         id: bstack-save
-        if: ${{ fromJSON(steps.define.outputs.result).hasBSBrowsers }}
+        if: ${{ fromJSON(steps.define.outputs.result).bsBrowsers > 0 }}
         uses: ./.github/actions/save
         with:
           prefix: browserstack-
@@ -85,9 +80,9 @@ jobs:
       built-key: ${{ needs.build.outputs.built-key }}
       test-cmd: gulp test-build-logic
 
-  browser-tests:
+  e2e-tests:
     needs: [setup, build]
-    name: "Browser: ${{ matrix.browser.name }}"
+    name: "E2E (browser: ${{ matrix.browser.wdioName }})"
     strategy:
       fail-fast: false
       matrix:
@@ -95,9 +90,30 @@ jobs:
     uses:
       ./.github/workflows/run-tests.yml
     with:
+      browser: ${{ matrix.browser.wdioName }}
       built-key: ${{ needs.build.outputs.built-key }}
-      test-cmd: ${{ inputs.test-cmd }} --browsers ${{ matrix.browser.name }} ${{ matrix.browser.coverage && '--coverage' || '--no-coverage' }}
-      chunks: ${{ inputs.chunks }}
+      test-cmd: npx gulp e2e-test-nobuild --local
+      chunks: 1
+      runs-on: ${{ matrix.browser.runsOn || 'ubuntu-latest' }}
+      install-safari: ${{ matrix.browser.runsOn == 'macos-latest' }}
+      run-npm-install: ${{ matrix.browser.runsOn == 'windows-latest' }}
+      browserstack: false
+
+  unit-tests:
+    needs: [setup, build]
+    name: "Unit (browser: ${{ matrix.browser.name }} ${{ matrix.browser.version }})"
+    strategy:
+      fail-fast: false
+      matrix:
+        browser: ${{ fromJSON(needs.setup.outputs.browsers) }}
+    uses:
+      ./.github/workflows/run-tests.yml
+    with:
+      install-deb: ${{ matrix.browser.deb }}
+      install-chrome: ${{ matrix.browser.chrome }}
+      built-key: ${{ needs.build.outputs.built-key }}
+      test-cmd: npx gulp test-only-nobuild --browsers ${{ matrix.browser.name }} ${{ matrix.browser.coverage && '--coverage' || '--no-coverage' }}
+      chunks: 8
       runs-on: ${{ matrix.browser.runsOn || 'ubuntu-latest' }}
 
   browserstack-tests:
@@ -108,9 +124,10 @@ jobs:
       ./.github/workflows/run-tests.yml
     with:
       built-key: ${{ needs.setup.outputs.bstack-key }}
-      test-cmd: ${{ inputs.test-cmd }} --browserstack --no-coverage
-      chunks: ${{ inputs.chunks }}
+      test-cmd: npx gulp test-only-nobuild --browserstack --no-coverage
+      chunks: 8
       browserstack: true
+      browserstack-sessions: ${{ fromJSON(needs.setup.outputs.bstack-sessions) }}
     secrets:
       BROWSERSTACK_USER_NAME: ${{ secrets.BROWSERSTACK_USER_NAME }}
       BROWSERSTACK_ACCESS_KEY: ${{ secrets.BROWSERSTACK_ACCESS_KEY }}

package/.github/workflows/browser_testing.json

@@ -1,17 +1,28 @@
 {
   "ChromeHeadless": {
     "bsName": "chrome",
-    "coverage": true
+    "wdioName": "chrome",
+    "coverage": true,
+    "versions": {
+      "113.0": {
+        "coverage": false,
+        "chrome": "113.0.5672.0",
+        "name": "ChromeNoSandbox"
+      }
+    }
   },
   "EdgeHeadless": {
     "bsName": "edge",
+    "wdioName": "msedge",
     "runsOn": "windows-latest"
   },
   "SafariNative": {
+    "wdioName": "safari technology preview",
     "bsName": "safari",
     "runsOn": "macos-latest"
   },
   "FirefoxHeadless": {
+    "wdioName": "firefox",
     "bsName": "firefox"
   }
 }

package/.github/workflows/run-tests.yml

@@ -2,6 +2,10 @@ name: Run unit tests
 on:
   workflow_call:
     inputs:
+      browser:
+        description: values to set as the BROWSER env variable
+        required: false
+        type: string
       chunks:
         description: Number of chunks to split tests into
         required: false
@@ -24,6 +28,11 @@ on:
         required: false
         type: boolean
         default: false
+      browserstack-sessions:
+        description: Number of browserstack sessions needed to run tests
+        required: false
+        type: number
+        default: 6
       timeout:
         description: Timeout on test run
         required: false
@@ -34,6 +43,24 @@ on:
         required: false
         default: ubuntu-latest
         type: string
+      install-safari:
+        description: Install Safari
+        type: boolean
+        required: false
+        default: false
+      install-chrome:
+        description: Chrome version to install via @puppeteer/browsers
+        type: string
+        required: false
+      run-npm-install:
+        description: Run npm install before tests
+        type: boolean
+        required: false
+        default: false
+      install-deb:
+        description: URL to deb to install before tests
+        type: string
+        required: false
     outputs:
       coverage:
         description: Artifact name for coverage results
@@ -46,15 +73,18 @@ on:
 
 jobs:
   checkout:
-    name: "Set up environment"
+    name: "Define chunks"
     runs-on: ubuntu-latest
     outputs:
       chunks: ${{ steps.chunks.outputs.chunks }}
+      id: ${{ steps.chunks.outputs.id }}
     steps:
       - name: Define chunks
         id: chunks
         run: |
-          echo 'chunks=[ '$(seq --separator=, 1 1 ${{ inputs.chunks }})' ]' >> "$GITHUB_OUTPUT"
+          echo 'chunks=[ '$(seq --separator=, 1 1 ${{ inputs.chunks }})' ]' >> out;
+          echo 'id='"$(uuidgen)" >> out;
+          cat out >> "$GITHUB_OUTPUT";
         
   build:
     uses: ./.github/workflows/build.yml
@@ -70,12 +100,13 @@ jobs:
       matrix:
         chunk-no: ${{ fromJSON(needs.checkout.outputs.chunks) }}
 
-    name: "Test chunk ${{ matrix.chunk-no }}"
+    name: Test${{ inputs.chunks > 1 && format(' chunk {0}', matrix.chunk-no) || '' }}
     env:
       BROWSERSTACK_USERNAME: ${{ secrets.BROWSERSTACK_USER_NAME }}
       BROWSERSTACK_ACCESS_KEY: ${{ secrets.BROWSERSTACK_ACCESS_KEY }}
       TEST_CHUNKS: ${{ inputs.chunks }}
       TEST_CHUNK: ${{ matrix.chunk-no }}
+      BROWSER: ${{ inputs.browser }}
     outputs:
       coverage: ${{ steps.coverage.outputs.coverage }}
     concurrency:
@@ -83,7 +114,7 @@ jobs:
       # Ideally we'd like to serialize browserstack access across all workflows, but github's max queue length is only 1
       # (cfr. https://github.com/orgs/community/discussions/12835)
       # so we add the run_id to serialize only within one push / pull request (which has the effect of queueing e2e and unit tests)
-      group: ${{ inputs.browserstack && 'browser' || github.run_id }}${{ inputs.browserstack && 'stac' || inputs.test-cmd }}${{ inputs.browserstack && 'k' || matrix.chunk-no }}-${{ github.run_id }}
+      group: ${{ inputs.browserstack && format('browserstack-{0}', github.run_id) || format('{0}-{1}', needs.checkout.outputs.id, matrix.chunk-no) }}
       cancel-in-progress: false
 
     runs-on: ${{ inputs.runs-on }}
@@ -96,6 +127,35 @@ jobs:
         with:
           name: ${{ needs.build.outputs.built-key }}
 
+      - name: Install safari
+        if: ${{ inputs.install-safari }}
+        run: |
+          brew install --cask safari-technology-preview
+          defaults write com.apple.Safari IncludeDevelopMenu YES
+          defaults write com.apple.Safari AllowRemoteAutomation 1
+          sudo safaridriver --enable
+          sudo "/Applications/Safari Technology Preview.app/Contents/MacOS/safaridriver" --enable
+
+      - name: Install Chrome
+        if: ${{ inputs.install-chrome }}
+        shell: bash
+        run: |
+          out=($(npx @puppeteer/browsers install chrome@${{ inputs.install-chrome }}))
+          echo 'CHROME_BIN='"${out[1]}" >> env;
+          cat env
+          cat env >> "$GITHUB_ENV"
+
+      - name: Install deb
+        if: ${{ inputs.install-deb }}
+        uses: ./.github/actions/install-deb
+        with:
+          url: ${{ inputs.install-deb }}
+
+      - name: Run npm install
+        if: ${{ inputs.run-npm-install }}
+        run: |
+          npm install
+
       - name: 'BrowserStack Env Setup'
         if: ${{ inputs.browserstack }}
         uses: 'browserstack/github-actions/setup-env@master'
@@ -114,6 +174,8 @@ jobs:
       - name: 'Wait for browserstack'
         if: ${{ inputs.browserstack }}
         uses: ./.github/actions/wait-for-browserstack
+        with:
+          sessions: ${{ inputs.browserstack-sessions }}
 
       - name: Run tests
         uses: nick-fields/retry@v3
@@ -121,6 +183,7 @@ jobs:
           timeout_minutes: ${{ inputs.timeout }}
           max_attempts: 3
           command: ${{ inputs.test-cmd }}
+          shell: bash
 
       - name: 'BrowserStackLocal Stop'
         if: ${{ inputs.browserstack }}

package/.github/workflows/scripts/assignReviewers.js

@@ -0,0 +1,39 @@
+const ghRequester = require('./ghRequest.js');
+
+function pickFrom(candidates, exclude, no) {
+  exclude = exclude.slice();
+  const winners = [];
+  while (winners.length < no) {
+    const candidate = candidates[Math.floor(Math.random() * candidates.length)];
+    if (!exclude.includes(candidate)) {
+      winners.push(candidate);
+      exclude.push(candidate);
+    }
+  }
+  return winners;
+}
+
+async function assignReviewers({github, context, prData}) {
+  const allReviewers = prData.review.reviewers.map(rv => rv.login);
+  const requestedReviewers = prData.review.requestedReviewers;
+  const missingPrebidEng = prData.review.requires.prebidEngineers - prData.review.prebidEngineers;
+  const missingPrebidReviewers = prData.review.requires.prebidReviewers - prData.review.prebidReviewers - (missingPrebidEng > 0 ? missingPrebidEng : 0);
+
+  if (missingPrebidEng > 0) {
+    requestedReviewers.push(...pickFrom(prData.prebidEngineers, [...allReviewers, prData.author.login], missingPrebidEng))
+  }
+  if (missingPrebidReviewers > 0) {
+    requestedReviewers.push(...pickFrom(prData.prebidReviewers, [...allReviewers, prData.author.login], missingPrebidReviewers))
+  }
+
+  const request = ghRequester(github);
+  await request('POST /repos/{owner}/{repo}/pulls/{prNo}/requested_reviewers', {
+    owner: context.repo.owner,
+    repo: context.repo.repo,
+    prNo: prData.pr,
+    reviewers: requestedReviewers
+  })
+  return requestedReviewers;
+}
+
+module.exports = assignReviewers;

package/.github/workflows/scripts/getPRProperties.js

@@ -0,0 +1,163 @@
+const ghRequester = require('./ghRequest.js');
+const AWS = require("@aws-sdk/client-s3");
+
+const MODULE_PATTERNS = [
+  /^modules\/([^\/]+)BidAdapter(\.(\w+)|\/)/,
+  /^modules\/([^\/]+)AnalyticsAdapter(\.(\w+)|\/)/,
+  /^modules\/([^\/]+)RtdProvider(\.(\w+)|\/)/,
+  /^modules\/([^\/]+)IdSystem(\.(\w+)|\/)/
+]
+
+const EXCLUDE_PATTERNS = [
+  /^test\//,
+  /^integrationExamples\//
+]
+const LIBRARY_PATTERN = /^libraries\/([^\/]+)\//;
+
+function extractVendor(chunkName) {
+  for (const pat of MODULE_PATTERNS) {
+    const match = pat.exec(`modules/${chunkName}`);
+    if (match != null) {
+      return match[1];
+    }
+  }
+  return chunkName;
+}
+
+const getLibraryRefs = (() => {
+  const deps = require('../../../build/dist/dependencies.json');
+  const refs = {};
+  return function (libraryName) {
+    if (!refs.hasOwnProperty(libraryName)) {
+      refs[libraryName] = new Set();
+      Object.entries(deps)
+        .filter(([name, deps]) => deps.includes(`${libraryName}.js`))
+        .forEach(([name]) => refs[libraryName].add(extractVendor(name)))
+    }
+    return refs[libraryName];
+  }
+})();
+
+function isCoreFile(path) {
+  if (EXCLUDE_PATTERNS.find(pat => pat.test(path))) {
+    return false;
+  }
+  if (MODULE_PATTERNS.find(pat => pat.test(path)) ) {
+    return false;
+  }
+  const lib = LIBRARY_PATTERN.exec(path);
+  if (lib != null) {
+    // a library is "core" if it's used by more than one vendor
+    return getLibraryRefs(lib[1]).size > 1;
+  }
+  return true;
+}
+
+async function isPrebidMember(ghHandle) {
+  const client = new AWS.S3({region: 'us-east-2'});
+  const res = await client.getObject({
+    Bucket: 'repo-dashboard-files-891377123989',
+    Key: 'memberMapping.json'
+  });
+  const members = JSON.parse(await res.Body.transformToString());
+  return members.includes(ghHandle);
+}
+
+
+async function getPRProperties({github, context, prNo, reviewerTeam, engTeam, authReviewTeam}) {
+  const request = ghRequester(github);
+  let [files, pr, prReviews, prebidReviewers, prebidEngineers, authorizedReviewers] = await Promise.all([
+    request('GET /repos/{owner}/{repo}/pulls/{prNo}/files', {
+      owner: context.repo.owner,
+      repo: context.repo.repo,
+      prNo,
+    }),
+    request('GET /repos/{owner}/{repo}/pulls/{prNo}', {
+      owner: context.repo.owner,
+      repo: context.repo.repo,
+      prNo,
+    }),
+    request('GET /repos/{owner}/{repo}/pulls/{prNo}/reviews', {
+      owner: context.repo.owner,
+      repo: context.repo.repo,
+      prNo,
+    }),
+    ...[reviewerTeam, engTeam, authReviewTeam].map(team => request('GET /orgs/{org}/teams/{team}/members', {
+      org: context.repo.owner,
+      team,
+    }))
+  ]);
+  prebidReviewers = prebidReviewers.data.map(datum => datum.login);
+  prebidEngineers = prebidEngineers.data.map(datum=> datum.login);
+  authorizedReviewers = authorizedReviewers.data.map(datum=> datum.login);
+  let isCoreChange = false;
+  files = files.data.map(datum => datum.filename).map(file => {
+    const core = isCoreFile(file);
+    if (core) isCoreChange = true;
+    return {
+      file,
+      core
+    }
+  });
+  const review = {
+    prebidEngineers: 0,
+    prebidReviewers: 0,
+    reviewers: [],
+    requestedReviewers: []
+  };
+  const author = pr.data.user.login;
+  const allReviewers = new Set();
+  pr.data.requested_reviewers
+    .forEach(rv => {
+      allReviewers.add(rv.login);
+      review.requestedReviewers.push(rv.login);
+    });
+  prReviews.data.forEach(datum => allReviewers.add(datum.user.login));
+
+  allReviewers
+    .forEach(reviewer => {
+      if (reviewer === author) return;
+      const isPrebidEngineer = prebidEngineers.includes(reviewer);
+      const isPrebidReviewer = isPrebidEngineer || prebidReviewers.includes(reviewer) || authorizedReviewers.includes(reviewer);
+      if (isPrebidEngineer) {
+        review.prebidEngineers += 1;
+      }
+      if (isPrebidReviewer) {
+        review.prebidReviewers += 1
+      }
+      review.reviewers.push({
+        login: reviewer,
+        isPrebidEngineer,
+        isPrebidReviewer,
+      })
+    });
+  const data = {
+    pr: prNo,
+    author: {
+      login: author,
+      isPrebidMember: await isPrebidMember(author)
+    },
+    isCoreChange,
+    files,
+    prebidReviewers,
+    prebidEngineers,
+    review,
+  }
+  data.review.requires = reviewRequirements(data);
+  data.review.ok = satisfiesReviewRequirements(data.review);
+  return data;
+}
+
+function reviewRequirements(prData) {
+  return {
+    prebidEngineers: prData.author.isPrebidMember ? 1 : 0,
+    prebidReviewers: prData.isCoreChange ? 2 : 1
+  }
+}
+
+function satisfiesReviewRequirements({requires, prebidEngineers, prebidReviewers}) {
+  return prebidEngineers >= requires.prebidEngineers && prebidReviewers >= requires.prebidReviewers
+}
+
+
+module.exports = getPRProperties;

package/.github/workflows/scripts/ghRequest.js

@@ -0,0 +1,9 @@
+module.exports = function githubRequester(github) {
+  return function (verb, params) {
+    return github.request(verb, Object.assign({
+      headers: {
+        'X-GitHub-Api-Version': '2022-11-28'
+      }
+    }, params))
+  }
+}