add rubocop, clean up advisories first