[TSC]: Review permissions on inactive developers

[evenstensberg]

Need an internal document on this.

[evenstensberg]

1. Write script to remove inactive devs, put in .github
2. Need to review teams manually too
3. Maybe adopt Eslint appraoch towards depreciating inactive users

[alexander-akait]

Shortly - let's write a script using GitHub API to collect all people and their permission, review our current teams (inaction developer will be just a part of organisation) and also remove permissions for all inactive developer (last year)

[avivkeller]

For the Node.js web team, I wrote https://github.com/nodejs/web-team/blob/main/.github/scripts/inactive-collaborator-report.mjs to log all inactive contributors, I'm sure it can be adapted for Webpack

[alexander-akait]

@avivkeller oh, thank you

[avivkeller]

Members of webpack who haven't interacted with any issues/PRs or authored any commits in 12 months

3846masa
Akryum
alabbas-ali
alistairjcbrown
anikethsaha
billyjanitsch
bitpshr
byzyk
ChadKillingsworth
Connormiha
daKmoR
DarkoKukovec
debs-obrien
dhruvdutt
dmohns
elliottsj
FadySamirSadek
filipesilva
fokusferit
godcrampy
gpoitch
Graham42
hemal7735
hulkish
Janpot
jayjun
jbottigliero
jennings
JSFOwner
justinhelmer
kentcdodds
lencioni
ljcrapo
ljqx
loveky
markdalgleish
matheus1lva
mattlewis92
mikegreiling
mikesherov
mistic
MrKou47
NejcZdovc
niieani
nveenjain
o-t-w
pastelsky
PatrickJS
pksjce
pranshuchittora
ryanclark
sakhisheikh
samccone
shama
sumit-gupta91
tbroadley
timse
tryzniak
wtgtybhertgeghgtwtg

import { Octokit } from "octokit";

const getDateMonthsAgo = (months = 12) => {
  const date = new Date();
  date.setMonth(date.getMonth() - months);
  return date.toISOString().split("T")[0];
};

const getOrgMembers = async (octokit, org) => {
  const members = await octokit.paginate(octokit.rest.orgs.listMembers, {
    org,
    per_page: 100,
  });

  return members.map((member) => member.login);
};

const checkUserActivity = async (octokit, username, org, repo, cutoffDate) => {
  const filter = repo ? `repo:${org}/${repo}` : `org:${org}`;

  const commitsResponse = await octokit.rest.search.commits({
    q: `author:${username} ${filter} committer-date:>=${cutoffDate}`,
    per_page: 1,
  });

  if (commitsResponse.data.total_count > 0) {
    return false;
  }

  const issuesResponse = await octokit.rest.search.issuesAndPullRequests({
    q: `commenter:${username} ${filter} updated:>=${cutoffDate}`,
    per_page: 1,
  });

  return issuesResponse.data.total_count === 0;
};

const getInactiveUsers = async (octokit, usernames, org, repo, cutoffDate) => {
  const inactiveUsers = [];

  for (const username of usernames) {
    const inactive = await checkUserActivity(
      octokit,
      username,
      org,
      repo,
      cutoffDate
    );

    if (inactive) {
      console.log(username);
      inactiveUsers.push(username);
    }
  }

  return inactiveUsers;
};

export async function findInactiveUsers({ org, repo }) {
  const octokit = new Octokit({
    auth: process.env.GITHUB_TOKEN,
  });

  const cutoffDate = getDateMonthsAgo(12);
  const members = await getOrgMembers(octokit, org);

  return getInactiveUsers(octokit, members, org, repo, cutoffDate);
}

await findInactiveUsers({ org: "webpack" });

[evenstensberg]

@avivkeller ive removed the inactive members now, can you re-check that they are not in the org?