This app primarily serves as a helper for this reusalbe GitHub Actions workflow. The corresponding server code can be found here. It automatically approves pull requests under the following conditions:

• Every commit currently on the pull request has commit.author.email equal to ci@js-soft.com. The email is configurable through APPROVED_AUTHOR_EMAIL.
• The pull request only changes package-lock.json and/or .nsprc.
• The pull request has a dependencies or chore label.
• The pull request adds at most 2 new top-level exception entries to .nsprc.
• GitHub's global security advisory for every added .nsprc exception id has a severity of low or medium/moderate.