Merge pull request #4 from Inventium/master

add rubocop, clean up advisories first
find a package, not a temp