dbotquery 0.9

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 54f665596ce0a1ef9bc40d3fad0c0e208b8fcbe9b27225851584dbb5087a359c
+  data.tar.gz: 0da1bd780a74e60361ea1b7f703e9b6f15f57d31e5e6e69a4e1130a1d2a5be02
+SHA512:
+  metadata.gz: 474a2bf379ae1f15e293558e756efce924a1a8b5dec015e86774fe1bc64ba6d90c8a2e84b4ad7b7a9b616257ebf0f7bd1a0f5fcf31adf37ba5f0e3e42879f307
+  data.tar.gz: 8c3e80eee61bc7437fdc5cd7b95c9ae67719b67d4381b7f08e44cca8e905df4fd0164ffd9ee0a212d58735e3228314142112999e76d01250616c018e0becb1c9

data/.idea/.gitignore

@@ -0,0 +1,10 @@
+# Default ignored files
+/shelf/
+/workspace.xml
+# Editor-based HTTP Client requests
+/httpRequests/
+# Ignored default folder with query files
+/queries/
+# Datasource local storage ignored files
+/dataSources/
+/dataSources.local.xml

data/.idea/dbotquery.iml

@@ -0,0 +1,130 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<module type="RUBY_MODULE" version="4">
+  <component name="ModuleRunConfigurationManager">
+    <shared>
+      <configuration default="false" name="Specs" type="RSpecRunConfigurationType" factoryName="RSpec">
+        <module name="dbotquery" />
+        <predefined_log_file enabled="true" id="RUBY_RSPEC" />
+        <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="RUBY_ARGS" VALUE="" />
+        <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="WORK DIR" VALUE="$MODULE_DIR$" />
+        <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="SHOULD_USE_SDK" VALUE="false" />
+        <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="ALTERN_SDK_NAME" VALUE="" />
+        <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="myPassParentEnvs" VALUE="true" />
+        <EXTENSION ID="BundlerRunConfigurationExtension" BUNDLE_MODE="AUTO" bundleExecEnabled="true" />
+        <EXTENSION ID="RubyCoverageRunConfigurationExtension" track_test_folders="true" runner="rcov" ENABLE_BRANCH_COVERAGE="true" ENABLE_FORKED_COVERAGE="true">
+          <COVERAGE_PATTERN ENABLED="true">
+            <PATTERN REGEXPS="/.rvm/" INCLUDED="false" />
+          </COVERAGE_PATTERN>
+        </EXTENSION>
+        <EXTENSION ID="org.jetbrains.plugins.ruby.rails.run.RailsRunConfigurationExtension" SCRATCH_USE_RAILS_RUNNER="false" />
+        <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="TESTS_FOLDER_PATH" VALUE="$MODULE_DIR$/spec" />
+        <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="TEST_SCRIPT_PATH" VALUE="" />
+        <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="TEST_SCRIPT_PATHS" VALUE="" />
+        <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="SPEC_RUNNER_PATH" VALUE="" />
+        <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="TEST_FILE_MASK" VALUE="**/*_spec.rb" />
+        <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="SPEC_EXAMPLE_NAME" VALUE="" />
+        <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="USE_EXAMPLE_MATCHES" VALUE="false" />
+        <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="LINE_NUMBER_EXAMPLE_IDS" VALUE="" />
+        <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="TEST_TEST_TYPE" VALUE="ALL_IN_FOLDER" />
+        <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="SPEC_ARGS" VALUE="" />
+        <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="RUNNER_VERSION" VALUE="" />
+        <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="USE_CUSTOM_SPEC_RUNNER" VALUE="false" />
+        <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="SPRING" VALUE="false" />
+        <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="FULL_BACKTRACE" VALUE="false" />
+        <method v="2" />
+      </configuration>
+    </shared>
+  </component>
+  <component name="NewModuleRootManager">
+    <content url="file://$MODULE_DIR$">
+      <sourceFolder url="file://$MODULE_DIR$/features" isTestSource="true" />
+      <sourceFolder url="file://$MODULE_DIR$/spec" isTestSource="true" />
+      <sourceFolder url="file://$MODULE_DIR$/test" isTestSource="true" />
+    </content>
+    <orderEntry type="jdk" jdkName="rbenv: 4.0.5" jdkType="RUBY_SDK" />
+    <orderEntry type="sourceFolder" forTests="false" />
+    <orderEntry type="library" scope="PROVIDED" name="activemodel (v8.1.3, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="activesupport (v8.1.3, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="addressable (v2.9.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="ast (v2.4.3, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="base64 (v0.3.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="bigdecimal (v3.3.1, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="bundler (v4.0.14, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="bundler-audit (v0.9.3, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="TEST" name="byebug (v13.0.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="coderay (v1.1.3, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="concurrent-ruby (v1.3.7, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="connection_pool (v3.0.2, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="csv (v3.3.5, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="diff-lcs (v1.6.2, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="docile (v1.4.1, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="drb (v2.2.3, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="dry-configurable (v1.4.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="dry-core (v1.2.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="dry-inflector (v1.3.1, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="dry-initializer (v3.2.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="dry-logic (v1.6.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="dry-schema (v1.16.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="dry-types (v1.9.1, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="ffi (v1.17.4, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="fileutils (v1.8.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="gemika (v2.0.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="i18n (v1.15.2, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="io-console (v0.8.2, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="json (v2.21.1, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="json-schema (v5.2.2, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="language_server-protocol (v3.17.0.6, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="lint_roller (v1.1.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="listen (v3.10.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="logger (v1.7.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="method_source (v1.1.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="minitest (v6.0.6, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="parallel (v2.1.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="parser (v3.3.11.1, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="prism (v1.9.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="TEST" name="pry (v0.16.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="public_suffix (v7.0.5, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="racc (v1.8.1, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="rainbow (v3.1.1, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="rake (v13.4.2, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="rb-fsevent (v0.11.2, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="rb-inotify (v0.11.1, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="TEST" name="rbs (v4.0.3, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="TEST" name="rbs-inline (v0.14.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="reek (v6.5.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="regexp_parser (v2.12.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="reline (v0.6.3, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="rexml (v3.4.4, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="TEST" name="rspec (v3.13.2, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="rspec-core (v3.13.6, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="rspec-expectations (v3.13.5, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="rspec-mocks (v3.13.8, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="rspec-support (v3.13.7, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="rubocop (v1.88.2, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="rubocop-ast (v1.50.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="rubocop-performance (v1.26.1, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="rubocop-rake (v0.7.1, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="rubocop-rspec (v3.10.2, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="rubocop-yard (v1.3.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="ruby-progressbar (v1.13.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="securerandom (v0.4.1, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="TEST" name="simplecov (v0.22.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="simplecov-html (v0.13.2, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="simplecov_json_formatter (v0.1.4, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="TEST" name="steep (v2.0.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="strscan (v3.1.8, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="terminal-table (v4.0.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="thor (v1.5.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="tsort (v0.2.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="tzinfo (v2.0.6, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="unicode-display_width (v3.2.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="unicode-emoji (v4.2.0, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="uri (v1.1.1, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="yard (v0.9.45, rbenv: 4.0.5) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="zeitwerk (v2.8.2, rbenv: 4.0.5) [gem]" level="application" />
+  </component>
+  <component name="RModuleSettingsStorage">
+    <LOAD_PATH number="1" string0="$MODULE_DIR$/lib" />
+    <I18N_FOLDERS number="0" />
+  </component>
+</module>

data/.idea/dictionaries/project.xml

@@ -0,0 +1,9 @@
+<component name="ProjectDictionaryState">
+  <dictionary name="project">
+    <words>
+      <w>cvss</w>
+      <w>dbotquery</w>
+      <w>ghsa</w>
+    </words>
+  </dictionary>
+</component>

data/.idea/modules.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="ProjectModuleManager">
+    <modules>
+      <module fileurl="file://$PROJECT_DIR$/.idea/dbotquery.iml" filepath="$PROJECT_DIR$/.idea/dbotquery.iml" />
+    </modules>
+  </component>
+</project>

data/.idea/runConfigurations/Specs.xml

@@ -0,0 +1,33 @@
+<component name="ProjectRunConfigurationManager">
+  <configuration default="false" name="Specs" type="RSpecRunConfigurationType" factoryName="RSpec">
+    <module name="dbotquery" />
+    <predefined_log_file enabled="true" id="RUBY_RSPEC" />
+    <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="RUBY_ARGS" VALUE="" />
+    <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="WORK DIR" VALUE="$MODULE_DIR$" />
+    <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="SHOULD_USE_SDK" VALUE="false" />
+    <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="ALTERN_SDK_NAME" VALUE="" />
+    <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="myPassParentEnvs" VALUE="true" />
+    <EXTENSION ID="BundlerRunConfigurationExtension" BUNDLE_MODE="AUTO" bundleExecEnabled="true" />
+    <EXTENSION ID="RubyCoverageRunConfigurationExtension" track_test_folders="true" runner="rcov" ENABLE_BRANCH_COVERAGE="true" ENABLE_FORKED_COVERAGE="true">
+      <COVERAGE_PATTERN ENABLED="true">
+        <PATTERN REGEXPS="/.rvm/" INCLUDED="false" />
+      </COVERAGE_PATTERN>
+    </EXTENSION>
+    <EXTENSION ID="org.jetbrains.plugins.ruby.rails.run.RailsRunConfigurationExtension" SCRATCH_USE_RAILS_RUNNER="false" />
+    <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="TESTS_FOLDER_PATH" VALUE="$MODULE_DIR$/spec" />
+    <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="TEST_SCRIPT_PATH" VALUE="" />
+    <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="TEST_SCRIPT_PATHS" VALUE="" />
+    <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="SPEC_RUNNER_PATH" VALUE="" />
+    <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="TEST_FILE_MASK" VALUE="**/*_spec.rb" />
+    <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="SPEC_EXAMPLE_NAME" VALUE="" />
+    <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="USE_EXAMPLE_MATCHES" VALUE="false" />
+    <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="LINE_NUMBER_EXAMPLE_IDS" VALUE="" />
+    <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="TEST_TEST_TYPE" VALUE="ALL_IN_FOLDER" />
+    <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="SPEC_ARGS" VALUE="" />
+    <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="RUNNER_VERSION" VALUE="" />
+    <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="USE_CUSTOM_SPEC_RUNNER" VALUE="false" />
+    <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="SPRING" VALUE="false" />
+    <RSPEC_RUN_CONFIG_SETTINGS_ID NAME="FULL_BACKTRACE" VALUE="false" />
+    <method v="2" />
+  </configuration>
+</component>

data/.idea/vcs.xml

@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="VcsDirectoryMappings">
+    <mapping directory="" vcs="Git" />
+  </component>
+</project>

data/.reek.yml

@@ -0,0 +1,8 @@
+
+---
+detectors:
+  UncommunicativeVariableName:
+    accept:
+      - e
+  MissingSafeMethod:
+    enabled: false

data/CHANGELOG.md

@@ -0,0 +1,5 @@
+## [Unreleased]
+
+## [0.1.0] - 2026-06-29
+
+- Initial release

data/CODE_OF_CONDUCT.md

@@ -0,0 +1,10 @@
+# Code of Conduct
+
+"dbotquery" follows [The Ruby Community Conduct Guideline](https://www.ruby-lang.org/en/conduct) in all "collaborative space", which is defined as community communications channels (such as mailing lists, submitted patches, commit comments, etc.):
+
+* Participants will be tolerant of opposing views.
+* Participants must ensure that their language and actions are free of personal attacks and disparaging personal remarks.
+* When interpreting the words and actions of others, participants should always assume good intentions.
+* Behaviour which can be reasonably considered harassment will not be tolerated.
+
+If you have any concerns about behaviour within this project, please contact us at ["rickmark@outlook.com"](mailto:"rickmark@outlook.com").

data/LICENSE.txt

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2026 Rick Mark
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

data/NOTES.md

@@ -0,0 +1,38 @@
+#
+
+## Rationale on Full Gem
+
+Due to the simple nature of the challenge, I decided that simply providing "a solution" wouldn't properly showcase what
+my ability to produce polished, maintainable, and secure code.  I therfore decided to be overly
+heavy-handed on showing what all proper aspects of SDLC / maintable code would look like.  This also
+is something outside the pervue of current AI tools (they can toss a bunch of process at a project, but fail
+in the correct usage of such tools).
+
+This means that the only directory that is of interest for the solution is `lib/dbotquery`, and the remaininng
+files can be considered engineering execlence / best practice.
+
+Similarly, due to the fact the example code was based on `argparse`, I decided to use the alternative of `thor` as to
+demonstrate a clean implmentation.  In reality, this adds a dependency and would not have been chosen had there not be
+value in displaying that the solution is free from the example code.
+
+## Extensive Comments
+
+Due to the fact Ruby is my prefered language, but not as common as say python, I've been overly verbose in the
+comments, particularly where there are "rubyisms"
+
+## YARD Documentation
+
+The solution shows proper code documenation inline, with the YARD (Yet another ruby documentation) documentation generated.
+
+## RSpec Testing
+
+The solution is asserted through proper testing.
+
+## RBS, Steep, Rubocop
+
+The solution includes Rubocop for proper code linting, Steep for static analysis.  These are quality tools for the
+purpose of showing a fully clean / production ready style of coding.
+
+## AI Attestation
+
+The solution was created with only typical IDE code completion, no agentic tools.

data/README.md

@@ -0,0 +1,34 @@
+# DBotQuery
+
+An example of a production ready query tool for GitHub dependabot data.
+
+## Installation
+
+Install the gem and add to the application's Gemfile by executing:
+
+```bash
+bundle install
+rake install
+```
+
+## Usage
+
+`bundle exec dbotquery summary`
+
+## Development
+
+After checking out the repo, run `bin/setup` to install dependencies. Then, run `rake spec` to run the tests. You can also run `bin/console` for an interactive prompt that will allow you to experiment.
+
+To install this gem onto your local machine, run `bundle exec rake install`. To release a new version, update the version number in `version.rb`, and then run `bundle exec rake release`, which will create a git tag for the version, push git commits and the created tag, and push the `.gem` file to [rubygems.org](https://rubygems.org).
+
+## Contributing
+
+Bug reports and pull requests are welcome on GitHub at https://github.com/[USERNAME]/dbotquery. This project is intended to be a safe, welcoming space for collaboration, and contributors are expected to adhere to the [code of conduct](https://github.com/[USERNAME]/dbotquery/blob/main/CODE_OF_CONDUCT.md).
+
+## License
+
+The gem is available as open source under the terms of the [MIT License](https://opensource.org/licenses/MIT).
+
+## Code of Conduct
+
+Everyone interacting in the Dbotquery project's codebases, issue trackers, chat rooms and mailing lists is expected to follow the [code of conduct](https://github.com/[USERNAME]/dbotquery/blob/main/CODE_OF_CONDUCT.md).

data/Rakefile

@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+# rbs_inline: enabled
+
+require 'bundler/gem_tasks'
+require 'bundler/setup'
+require 'rspec/core/rake_task'
+require 'rubocop/rake_task'
+require 'steep/rake_task'
+require 'gemika/tasks'
+require 'reek/rake/task'
+require 'yard'
+
+YARD::Rake::YardocTask.new do |t|
+  t.files   = ['lib/**/*.rb'] # Source files to document
+  t.options = %w[--any --extra-opts]
+end
+
+RSpec::Core::RakeTask.new(:spec)
+
+RuboCop::RakeTask.new
+
+Steep::RakeTask.new do |t|
+  t.check.severity_level = :error
+  t.watch.verbose = true
+end
+
+Reek::Rake::Task.new do |t|
+  t.fail_on_error = false
+  t.source_files = FileList['lib/**/*.rb']
+end
+
+task default: %i[yard rubocop spec steep]

data/Steepfile

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+# rbs_inline: enabled
+
+D = Steep::Diagnostic
+
+target :lib do
+  signature 'sig'
+
+  check 'lib'
+
+  library 'time'
+  library 'date'
+end
+
+target :test do
+  unreferenced!
+
+  signature 'sig'
+
+  check 'spec'
+
+  configure_code_diagnostics(D::Ruby.lenient)
+
+  gem 'rspec'
+end

data/exe/dbotquery

@@ -0,0 +1,8 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+# rbs_inline: enabled
+
+require_relative '../lib/dbotquery'
+require 'thor'
+
+DBotQuery::CLI.start

data/lib/d_bot_query/cli.rb

@@ -0,0 +1,74 @@
+# frozen_string_literal: true
+
+module DBotQuery
+  # Implements the CLI parsing and argument passing.  This permits two things:
+  #
+  # * The separation of the command and its unit tests from the actual command line
+  # * The testing of the command line interface, independent of the command itself
+  class CLI < Thor
+    # This ensures that Thor exits with a non-zero exit code when an error occurs
+    def self.exit_on_failure?
+      true
+    end
+
+    # Shared options for all commands are specified here
+    class_option :file, required: true, desc: 'Path to JSON file exported from Dependabot', aliases: ['-f'],
+                        example: 'dependabot.json'
+
+    desc 'summary', 'Count the number of vulnerabilities in a Dependabot JSON file'
+    long_desc <<~TEXT
+      This subcommand takes a JSON export from Dependabot and returns the number of findings in
+      the file. This command should take an optional “state” parameter so that the only vulnerabilities
+      that are counted are the ones that match its value (e.g. open, fixed, dismissed)
+    TEXT
+    method_option :state, desc: 'One of the possible states a finding can have', enum: %w[open fixed dismissed]
+    method_option :severity, desc: 'One of the possible severities a finding can have',
+                             enum: %w[critical high medium low]
+    def summary
+      state = options[:state]&.to_sym       #: DBotQuery::Commands::SummaryCommand::state?
+      severity = options[:severity]&.to_sym #: DBotQuery::Commands::SummaryCommand::severity?
+
+      run! DBotQuery::Commands::SummaryCommand.new(state: state, severity: severity)
+    end
+
+    desc 'sla_stats', 'Calculate the SLA statistics for a Dependabot JSON file'
+    method_option :time, desc: 'The time period to calculate the SLA statistics for', example: '2023-01-01T00:00:00Z',
+                         aliases: ['-t']
+    def sla_stats
+      time = parse_time(options[:time])
+      run! DBotQuery::Commands::SLAStatisticsCommand.new time: time
+    end
+
+    desc 'repo_sla_stats', 'Calculate the SLA statistics for a Dependabot JSON file for a given repository'
+    method_option :time, desc: 'The time period to calculate the SLA statistics for', example: '2023-01-01T00:00:00Z',
+                         aliases: ['-t']
+    def repo_sla_stats
+      time = parse_time(options[:time])
+      run! DBotQuery::Commands::RepoSLAStatisticsCommand.new time: time
+    end
+
+    desc 'package_search', 'Search for a package in a Dependabot JSON file'
+    option :package, desc: 'The name of the package to search for', required: true
+    def package_search
+      run! DBotQuery::Commands::PackageSearchCommand.new(package: options[:package])
+    end
+
+    private
+
+    # This encapsulates the logic for running a command.  It handles all the proper console-ish things as well as
+    # common parameters.
+    def run!(command)
+      file = options[:file]
+
+      command.execute!(file)
+    end
+
+    def parse_time(value)
+      return Time.now unless value
+
+      Time.parse(value)
+    rescue ArgumentError => e
+      raise Error, "Invalid time '#{value}': #{e.message}"
+    end
+  end
+end

data/lib/d_bot_query/commands/command_base.rb

@@ -0,0 +1,51 @@
+# frozen_string_literal: true
+# rbs_inline: enabled
+
+module DBotQuery
+  module Commands
+    # Abstract base class that all commands derive from.  This ensures that they handle the JSON and command line
+    # correctly.  Each command has a basic flow:
+    # * The command is instantiated with the proper arguments passed to the `new` call
+    # * The command has `#execute` called (common to all commands) which will call the abstract method `#perform`,
+    #   which produces the proper hash for the command.  Execute will then properly format and output the result
+    #   to the console.
+    class CommandBase
+      # The object result of the perform method.  This is prior to serialization allowing composition of commands
+      attr_reader :result
+
+      # Abstract initializer
+      def initialize
+        return if self.class.name != 'DBotQuery::Commands::CommandBase'
+
+        raise NotImplementedError, 'Cannot instantiate an abstract class directly'
+      end
+
+      # The shared implementation of the command, which handles calling the abstract method, then formatting for the
+      # screen.  This permits the abstract method to be called in unit testing without reliance on the console.
+      # As every command operates on the same input file, this is handled as a parameter here.  This permits common
+      # error handling such as if the file does not exist or fails to parse.
+      #
+      # @param  [String] file    The path to the input file
+      # @return void
+      def execute!(file)
+        file_path = Pathname.new(file)
+
+        raise DBotQuery::Error, "File #{file} does not exist" unless file_path.exist? && file_path.file?
+
+        input = Models::DataFile.load_file file_path
+
+        @result = perform(input)
+
+        puts JSON.pretty_generate(@result)
+      end
+
+      # Abstract method that performs the work of the command.
+      #
+      # @abstract
+      # @return Hash
+      def perform(_input)
+        raise NotImplementedError, '#perform is abstract and must be implemented in derived classes'
+      end
+    end
+  end
+end

data/lib/d_bot_query/commands/package_search_command.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+module DBotQuery
+  module Commands
+    # # Package Search
+    # One question we often get asked is `do we use an X library?`. This subcommand will help us
+    # answer that. The subcommand should take a package name, and the result should contain a list
+    # of all the repositories where that package was seen.
+    #
+    # ## Inputs
+    #
+    # | Command Line Flag | Required? | Description | Example |
+    # | :--- | :--- | :--- | :--- |
+    # | -f/--file | yes | Path to JSON file exported from Dependabot | dependabot.json |
+    # | --package | yes | A package name | sinatra, puma, node-forge |
+    #
+    # ## Example commands
+    # * `./dbotquery package_search -f dependabot.json --package sinatra`
+    # * `./dbotquery package_search -f dependabot.json --package node-forge`
+    #
+    # ## Outputs
+    # ```json
+    # ["org/repo", "org/repo2"]
+    # ```
+    class PackageSearchCommand < CommandBase
+      attr_reader :package
+
+      # @param [String] package The name of the package to search for
+      def initialize(package:)
+        super()
+
+        @package = package
+      end
+
+      def perform(input)
+        input.alerts.package_search(@package)
+      end
+    end
+  end
+end

data/lib/d_bot_query/commands/repo_sla_statistics_command.rb

@@ -0,0 +1,52 @@
+# frozen_string_literal: true
+# rbs_inline: enabled
+
+module DBotQuery
+  module Commands
+    # # Service Level Agreement Stats by Repo
+    # Now that we can get SLA stats for the entire organization, we want to view SLA stats for specific
+    # repositories as well. This will allow us to disseminate SLA statistics by repository, so the right
+    # people can view information specific to their code.
+    # Effectively, this will be the same thing as the previous subcommand, just broken out by
+    # repository.
+    #
+    # ## Inputs
+    #
+    # | Command Line Flag | Required? | Description | Example |
+    # | :--- | :--- | :--- | :--- |
+    # | -f/--file | yes | Path to JSON file exported from Dependabot | dependabot.json |
+    # | --time | no | The date/time for which the SLA is being calculated, in ISO8601 format | 2023-01-01T00:00:00Z |
+    #
+    # ## Example commands
+    #
+    # * `./your_program repo_sla_stats -f dependabot.json`
+    #   * A count of all findings that exceed the SLA, separated by severity and repository. The current time is
+    # used when calculating age.
+    # * `./your_program repo_sla_stats -f dependabot.json -t 2023-01-01T00:00:00Z`
+    #   * A count of all findings that exceed the SLA, separated by severity and repository. The time specified is
+    # used when calculating age.
+    #
+    # ## Outputs
+    #
+    # ```json
+    # {
+    #   "org/repo": { "low": $count, "medium": $count, "high": $count, "critical": $count, "total": $count },
+    #   "org/repo2": { "low": $count, "medium": $count, "high": $count, "critical": $count, "total": $count }
+    # }
+    # ```
+    #
+    # The output is roughly the same as with the previous subcommand, except broken out by
+    # repository. The keys here are each repository, and the values are their corresponding
+    # SLA stats.
+    class RepoSLAStatisticsCommand < CommandBase
+      def initialize(time: nil)
+        super()
+        @time = time || Time.now
+      end
+
+      def perform(input)
+        input.alerts.repo_sla_stats @time
+      end
+    end
+  end
+end