yavdb 0.1.0.pre.alpha.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (39) hide show
  1. checksums.yaml +7 -0
  2. data/.circleci/config.yml +48 -0
  3. data/.gitignore +115 -0
  4. data/.rspec +3 -0
  5. data/.rubocop.yml +339 -0
  6. data/.ruby-version +1 -0
  7. data/CODE_OF_CONDUCT.md +74 -0
  8. data/Gemfile +4 -0
  9. data/Gemfile.lock +85 -0
  10. data/LICENSE +661 -0
  11. data/README.md +87 -0
  12. data/Rakefile +6 -0
  13. data/bin/console +7 -0
  14. data/bin/setup +8 -0
  15. data/bin/vulndb +3 -0
  16. data/bin/vulnerabilitydb +3 -0
  17. data/bin/yavdb +5 -0
  18. data/lib/yavdb.rb +68 -0
  19. data/lib/yavdb/cli.rb +60 -0
  20. data/lib/yavdb/constants.rb +34 -0
  21. data/lib/yavdb/crawler.rb +52 -0
  22. data/lib/yavdb/database.rb +95 -0
  23. data/lib/yavdb/dtos/advisory.rb +102 -0
  24. data/lib/yavdb/source_types/git_repo.rb +35 -0
  25. data/lib/yavdb/sources/friends_of_php.rb +87 -0
  26. data/lib/yavdb/sources/nodesecurity_io.rb +120 -0
  27. data/lib/yavdb/sources/ossindex.rb +137 -0
  28. data/lib/yavdb/sources/ruby_advisory.rb +117 -0
  29. data/lib/yavdb/sources/snyk_io.rb +311 -0
  30. data/lib/yavdb/sources/victims.rb +105 -0
  31. data/lib/yavdb/utils/cache.rb +96 -0
  32. data/lib/yavdb/utils/exec.rb +36 -0
  33. data/lib/yavdb/utils/git.rb +61 -0
  34. data/lib/yavdb/utils/http.rb +56 -0
  35. data/lib/yavdb/utils/semver.rb +79 -0
  36. data/lib/yavdb/utils/zip.rb +64 -0
  37. data/lib/yavdb/version.rb +21 -0
  38. data/yavdb.gemspec +44 -0
  39. metadata +267 -0
checksums.yaml ADDED
@@ -0,0 +1,7 @@
1
+ ---
2
+ SHA1:
3
+ metadata.gz: 33175f8427320ef9d1ed8421f965cb7e32899f0b
4
+ data.tar.gz: 77d7ab227ab34539f4a73308ff0a638a1cbb546a
5
+ SHA512:
6
+ metadata.gz: aa6bedf1169b70eaa9e74e88911f5e673b5f0f5bdd9d442e5c07f4c4c3c8c301c90fc4cd6be11cb9229ea0394e80ec85a53597f18e4834fd719ba25be8141d3c
7
+ data.tar.gz: 3d4e45d7461ffed3ee11cf4f30d98925db37581f7f6c9118df6b4385d91e9d80304c71249fc0b66d321d76aab4ed6466bd00d44af135ab7e4c23c7dbf8763262
data/.circleci/config.yml ADDED
@@ -0,0 +1,48 @@
1
+ version: 2
2
+
3
+ jobs:
4
+ build-lint-test:
5
+ working_directory: ~/yavdb
6
+ docker:
7
+ - image: circleci/ruby:2.3.7
8
+ steps:
9
+ - checkout
10
+
11
+ - name: Install Bundler Version
12
+ type: shell
13
+ command: gem install bundler -v 1.16
14
+
15
+ - name: Restore cache
16
+ type: cache-restore
17
+ key: yavdb-{{ checksum "Gemfile.lock" }}
18
+
19
+ - name: Bundle Install
20
+ type: shell
21
+ command: bundle install --path /tmp/vendor/bundle
22
+
23
+ - name: Save bundler cache
24
+ type: cache-save
25
+ key: yavdb-{{ checksum "Gemfile.lock" }}
26
+ paths:
27
+ - /tmp/vendor/bundle
28
+ - ~/.yavdb/cache
29
+
30
+ - name: Save yavdb cache
31
+ type: cache-save
32
+ key: yavdb-cache-1
33
+ paths:
34
+ - ~/.yavdb/cache
35
+
36
+ - name: Rubocop
37
+ type: shell
38
+ command: bundle exec rubocop
39
+
40
+ - name: Tests
41
+ type: shell
42
+ command: bundle exec rake
43
+
44
+ workflows:
45
+ version: 2
46
+ test-and-publish:
47
+ jobs:
48
+ - build-lint-test
data/.gitignore ADDED
@@ -0,0 +1,115 @@
1
+ # Created by https://www.gitignore.io/api/jetbrains,ruby
2
+
3
+ ### JetBrains ###
4
+ # Covers JetBrains IDEs: IntelliJ, RubyMine, PhpStorm, AppCode, PyCharm, CLion, Android Studio and Webstorm
5
+ # Reference: https://intellij-support.jetbrains.com/hc/en-us/articles/206544839
6
+
7
+ # User-specific stuff:
8
+ .idea/workspace.xml
9
+ .idea/tasks.xml
10
+
11
+ # Sensitive or high-churn files:
12
+ .idea/dataSources/
13
+ .idea/dataSources.ids
14
+ .idea/dataSources.xml
15
+ .idea/dataSources.local.xml
16
+ .idea/sqlDataSources.xml
17
+ .idea/dynamic.xml
18
+ .idea/uiDesigner.xml
19
+
20
+ # Gradle:
21
+ .idea/gradle.xml
22
+ .idea/libraries
23
+
24
+ # Mongo Explorer plugin:
25
+ .idea/mongoSettings.xml
26
+
27
+ ## File-based project format:
28
+ *.iws
29
+
30
+ ## Plugin-specific files:
31
+
32
+ # IntelliJ
33
+ /out/
34
+
35
+ # mpeltonen/sbt-idea plugin
36
+ .idea_modules/
37
+
38
+ # JIRA plugin
39
+ atlassian-ide-plugin.xml
40
+
41
+ # Crashlytics plugin (for Android Studio and IntelliJ)
42
+ com_crashlytics_export_strings.xml
43
+ crashlytics.properties
44
+ crashlytics-build.properties
45
+ fabric.properties
46
+
47
+ ### JetBrains Patch ###
48
+ # Comment Reason: https://github.com/joeblau/gitignore.io/issues/186#issuecomment-215987721
49
+
50
+ # *.iml
51
+ # modules.xml
52
+ # .idea/misc.xml
53
+ # *.ipr
54
+
55
+
56
+ ### Ruby ###
57
+ *.gem
58
+ *.rbc
59
+ /.config
60
+ /coverage/
61
+ /InstalledFiles
62
+ /pkg/
63
+ /spec/reports/
64
+ /spec/examples.txt
65
+ /test/tmp/
66
+ /test/version_tmp/
67
+ /tmp/
68
+
69
+ # rspec failure tracking
70
+ .rspec_status
71
+
72
+ # Used by dotenv library to load environment variables.
73
+ # .env
74
+
75
+ ## Specific to RubyMotion:
76
+ .dat*
77
+ .repl_history
78
+ build/
79
+ *.bridgesupport
80
+ build-iPhoneOS/
81
+ build-iPhoneSimulator/
82
+
83
+ ## Specific to RubyMotion (use of CocoaPods):
84
+ #
85
+ # We recommend against adding the Pods directory to your .gitignore. However
86
+ # you should judge for yourself, the pros and cons are mentioned at:
87
+ # https://guides.cocoapods.org/using/using-cocoapods.html#should-i-check-the-pods-directory-into-source-control
88
+ #
89
+ # vendor/Pods/
90
+
91
+ ## Documentation cache and generated files:
92
+ /.yardoc/
93
+ /_yardoc/
94
+ /doc/
95
+ /rdoc/
96
+
97
+ ## Environment normalization:
98
+ /.bundle/
99
+ /vendor/bundle
100
+ /lib/bundler/man/
101
+ /spec/coverage/
102
+
103
+ # for a library or gem, you might want to ignore these files since the code is
104
+ # intended to run in multiple environments; otherwise, check them in:
105
+ # Gemfile.lock
106
+ # .ruby-version
107
+ # .ruby-gemset
108
+
109
+ # unless supporting rvm < 1.11.0 or doing something fancy, ignore this:
110
+ .rvmrc
111
+
112
+ # End of https://www.gitignore.io/api/jetbrains,ruby
113
+
114
+ .idea/
115
+ *.iml
data/.rspec ADDED
@@ -0,0 +1,3 @@
1
+ --format documentation
2
+ --color
3
+ --require spec_helper
data/.rubocop.yml ADDED
@@ -0,0 +1,339 @@
1
+ AllCops:
2
+ # Include common Ruby source files.
3
+ Include:
4
+ - '**/*.builder'
5
+ - '**/*.fcgi'
6
+ - '**/*.gemspec'
7
+ - '**/*.god'
8
+ - '**/*.jb'
9
+ - '**/*.jbuilder'
10
+ - '**/*.mspec'
11
+ - '**/*.opal'
12
+ - '**/*.pluginspec'
13
+ - '**/*.podspec'
14
+ - '**/*.rabl'
15
+ - '**/*.rake'
16
+ - '**/*.rb'
17
+ - '**/*.rbuild'
18
+ - '**/*.rbw'
19
+ - '**/*.rbx'
20
+ - '**/*.ru'
21
+ - '**/*.ruby'
22
+ - '**/*.spec'
23
+ - '**/*.thor'
24
+ - '**/*.watchr'
25
+ - '**/.irbrc'
26
+ - '**/.pryrc'
27
+ - '**/buildfile'
28
+ - '**/config.ru'
29
+ - '**/Appraisals'
30
+ - '**/Berksfile'
31
+ - '**/Brewfile'
32
+ - '**/Buildfile'
33
+ - '**/Capfile'
34
+ - '**/Cheffile'
35
+ - '**/Dangerfile'
36
+ - '**/Deliverfile'
37
+ - '**/Fastfile'
38
+ - '**/*Fastfile'
39
+ - '**/Gemfile'
40
+ - '**/Guardfile'
41
+ - '**/Jarfile'
42
+ - '**/Mavenfile'
43
+ - '**/Podfile'
44
+ - '**/Puppetfile'
45
+ - '**/Rakefile'
46
+ - '**/Snapfile'
47
+ - '**/Thorfile'
48
+ - '**/Vagabondfile'
49
+ - '**/Vagrantfile'
50
+ Exclude:
51
+ - 'database/**/*'
52
+ - 'db/**/*'
53
+ - 'tmp/**/*'
54
+ - 'vendor/**/*'
55
+ - 'bin/**/*'
56
+ - 'log/**/*'
57
+ DefaultFormatter: progress
58
+ UseCache: false
59
+ DisplayCopNames: false
60
+ TargetRubyVersion: 2.3.7
61
+
62
+ Gemspec/OrderedDependencies:
63
+ Enabled: true
64
+
65
+ Layout/CaseIndentation:
66
+ Enabled: true
67
+ IndentOneStep: true
68
+
69
+ Layout/CommentIndentation:
70
+ Enabled: true
71
+
72
+ Layout/EmptyLineAfterMagicComment:
73
+ Enabled: true
74
+
75
+ Layout/EmptyLinesAroundAccessModifier:
76
+ Enabled: true
77
+
78
+ Layout/EmptyLinesAroundBlockBody:
79
+ Enabled: true
80
+
81
+ Layout/EmptyLinesAroundClassBody:
82
+ Enabled: true
83
+ EnforcedStyle: empty_lines_except_namespace
84
+
85
+ Layout/EmptyLinesAroundMethodBody:
86
+ Enabled: true
87
+
88
+ Layout/EmptyLinesAroundModuleBody:
89
+ Enabled: true
90
+ EnforcedStyle: empty_lines_except_namespace
91
+
92
+ Layout/ExtraSpacing:
93
+ Enabled: true
94
+
95
+ Layout/FirstParameterIndentation:
96
+ Enabled: true
97
+ EnforcedStyle: consistent
98
+ IndentationWidth: 2
99
+
100
+ Layout/IndentArray:
101
+ Enabled: true
102
+
103
+ Layout/IndentAssignment:
104
+ Enabled: true
105
+
106
+ Layout/IndentHash:
107
+ Enabled: true
108
+
109
+ Layout/MultilineHashBraceLayout:
110
+ Enabled: true
111
+
112
+ Layout/MultilineMethodCallIndentation:
113
+ Enabled: true
114
+ EnforcedStyle: indented_relative_to_receiver
115
+ IndentationWidth: 2
116
+
117
+ Layout/MultilineOperationIndentation:
118
+ Enabled: true
119
+
120
+ Layout/SpaceAfterComma:
121
+ Enabled: true
122
+
123
+ Layout/AlignParameters:
124
+ Enabled: true
125
+ EnforcedStyle: with_fixed_indentation
126
+
127
+ Layout/SpaceAroundOperators:
128
+ Enabled: true
129
+ AllowForAlignment: true
130
+ Exclude:
131
+ - "lib/yavdb/sources/nvd_constants.rb"
132
+
133
+ Layout/SpaceInsideBlockBraces:
134
+ Enabled: true
135
+ EnforcedStyle: space
136
+ EnforcedStyleForEmptyBraces: space
137
+
138
+ Layout/SpaceInsideHashLiteralBraces:
139
+ Enabled: true
140
+
141
+ Lint/IneffectiveAccessModifier:
142
+ Enabled: true
143
+
144
+ Lint/LiteralAsCondition:
145
+ Enabled: true
146
+
147
+ Lint/UnusedMethodArgument:
148
+ Enabled: true
149
+
150
+ Lint/UselessAccessModifier:
151
+ Enabled: true
152
+
153
+ Lint/UselessAssignment:
154
+ Enabled: true
155
+
156
+ Lint/HandleExceptions:
157
+ Enabled: true
158
+ Exclude:
159
+ - "lib/yavdb/sources/snyk_io.rb"
160
+
161
+ Metrics/AbcSize:
162
+ Enabled: true
163
+ Max: 113
164
+
165
+ Metrics/BlockLength:
166
+ Enabled: true
167
+ Max: 51
168
+ Exclude:
169
+ - "spec/snyk_io_spec.rb"
170
+
171
+ Metrics/ClassLength:
172
+ Enabled: false
173
+ Max: 199
174
+
175
+ Metrics/CyclomaticComplexity:
176
+ Enabled: false
177
+ Max: 15
178
+
179
+ Metrics/LineLength:
180
+ Enabled: false
181
+ Max: 147
182
+
183
+ Metrics/MethodLength:
184
+ Enabled: false
185
+ Max: 94
186
+
187
+ Metrics/ModuleLength:
188
+ Enabled: false
189
+ Max: 2557
190
+
191
+ Metrics/PerceivedComplexity:
192
+ Enabled: false
193
+ Max: 11
194
+
195
+ Metrics/ParameterLists:
196
+ Enabled: true
197
+ Exclude:
198
+ - lib/yavdb/dtos/advisory.rb
199
+
200
+ Performance/RedundantBlockCall:
201
+ Enabled: true
202
+
203
+ Security/MarshalLoad:
204
+ Enabled: true
205
+ Exclude:
206
+ - 'lib/yavdb/utils/cache.rb'
207
+
208
+ Security/YAMLLoad:
209
+ Enabled: true
210
+
211
+ Style/BlockDelimiters:
212
+ Enabled: true
213
+
214
+ Style/BracesAroundHashParameters:
215
+ Enabled: true
216
+
217
+ Style/CaseEquality:
218
+ Enabled: true
219
+
220
+ Style/ClassCheck:
221
+ Enabled: true
222
+
223
+ Style/ColonMethodCall:
224
+ Enabled: true
225
+
226
+ Style/ConditionalAssignment:
227
+ Enabled: true
228
+
229
+ Style/DateTime:
230
+ Enabled: true
231
+
232
+ Style/DefWithParentheses:
233
+ Enabled: true
234
+
235
+ Style/Documentation:
236
+ Enabled: false
237
+
238
+ Style/EmptyElse:
239
+ Enabled: true
240
+
241
+ Style/EmptyLiteral:
242
+ Enabled: true
243
+
244
+ Style/Encoding:
245
+ Enabled: true
246
+
247
+ Style/FrozenStringLiteralComment:
248
+ Enabled: false
249
+
250
+ Style/GuardClause:
251
+ Enabled: true
252
+
253
+ Style/HashSyntax:
254
+ Enabled: true
255
+ EnforcedStyle: hash_rockets
256
+
257
+ Style/IdenticalConditionalBranches:
258
+ Enabled: true
259
+
260
+ Style/IfUnlessModifier:
261
+ Enabled: true
262
+
263
+ Style/InfiniteLoop:
264
+ Enabled: true
265
+
266
+ Style/InverseMethods:
267
+ Enabled: true
268
+
269
+ Style/Lambda:
270
+ Enabled: true
271
+ EnforcedStyle: lambda
272
+
273
+ Style/MultilineBlockChain:
274
+ Enabled: true
275
+
276
+ Style/MutableConstant:
277
+ Enabled: false
278
+
279
+ Style/Next:
280
+ Enabled: true
281
+
282
+ Style/PercentLiteralDelimiters:
283
+ Enabled: true
284
+
285
+ Style/RedundantSelf:
286
+ Enabled: true
287
+
288
+ Style/RegexpLiteral:
289
+ Enabled: true
290
+ EnforcedStyle: percent_r
291
+
292
+ Style/RescueModifier:
293
+ Enabled: true
294
+
295
+ Style/SafeNavigation:
296
+ Enabled: true
297
+
298
+ Style/SpecialGlobalVars:
299
+ Enabled: true
300
+ EnforcedStyle: use_english_names
301
+
302
+ Style/StringLiterals:
303
+ Enabled: true
304
+ EnforcedStyle: single_quotes
305
+ ConsistentQuotesInMultiline: true
306
+
307
+ Style/StructInheritance:
308
+ Enabled: false
309
+
310
+ Style/SymbolProc:
311
+ Enabled: true
312
+
313
+ Style/TrailingCommaInArguments:
314
+ Enabled: true
315
+ EnforcedStyleForMultiline: no_comma
316
+
317
+ Style/TrailingCommaInArrayLiteral:
318
+ Enabled: true
319
+ EnforcedStyleForMultiline: no_comma
320
+
321
+ Style/TrailingCommaInHashLiteral:
322
+ Enabled: true
323
+ EnforcedStyleForMultiline: no_comma
324
+
325
+ Style/UnneededInterpolation:
326
+ Enabled: true
327
+
328
+ Style/UnneededPercentQ:
329
+ Enabled: true
330
+
331
+ Style/WhileUntilDo:
332
+ Enabled: true
333
+
334
+ Style/WordArray:
335
+ Enabled: true
336
+ EnforcedStyle: brackets
337
+
338
+ Style/RescueStandardError:
339
+ Enabled: true