Core Rule Set: the package registries' searches of gitea and Forgejo pass (closes #354)

Recorded from gitea 1.27.3 and Forgejo 17.0.1 with each registry's own
client, and curl for the Chef cookbook list and NuGet's Packages(), with
python3, powershell, ls -la, .htaccess, file names and plain words. q on
the Cargo, Chef, Composer and Conan searches and NuGet's search service
joins 900603. 900605 lets /bin/sh through on Composer and Conan. New:
900609 for npm's text, 900611 lets a Conan pattern such as zlib/* skip
942100, and 900612 for NuGet's Search() and Packages(): searchTerm,
$filter, and the names $filter, $orderby and $top for 942290.

Model: opus-5-5

internal/coreruleset/testdata/gitea-requests.txt

@@ -442,6 +442,87 @@
 /api/v1/repos/alice/tools/milestones?state=open&name=.htaccess
 /api/v1/repos/alice/tools/milestones?state=open&name=v1.0
 
+# The package registries' searches, sent to gitea 1.27.3 by each registry's own
+# client: cargo, knife, composer, conan 1 and 2, dotnet and npm. curl sent the
+# requests no client sends: the Chef cookbook list with a search, and NuGet's
+# Packages() with the search in $filter, as NuGet's client builds it for a feed
+# without Search(). Each searches for words that name commands and files, such
+# as python3 and .htaccess, and for plain words. A Composer, Conan or npm name
+# can hold a slash, so those searches are also sent /bin/sh.
+/api/packages/alice/cargo/api/v1/crates?q=python3&per_page=10
+/api/packages/alice/cargo/api/v1/crates?q=powershell&per_page=10
+/api/packages/alice/cargo/api/v1/crates?q=ls%20%2Dla&per_page=10
+/api/packages/alice/cargo/api/v1/crates?q=%2Ehtaccess&per_page=10
+/api/packages/alice/cargo/api/v1/crates?q=docker%2Dcompose%2Eyml&per_page=10
+/api/packages/alice/cargo/api/v1/crates?q=tools&per_page=10
+/api/packages/alice/chef/api/v1/search?q=python3&items=9999999&start=0
+/api/packages/alice/chef/api/v1/search?q=powershell&items=9999999&start=0
+/api/packages/alice/chef/api/v1/search?q=ls%20-la&items=9999999&start=0
+/api/packages/alice/chef/api/v1/search?q=.htaccess&items=9999999&start=0
+/api/packages/alice/chef/api/v1/search?q=docker-compose.yml&items=9999999&start=0
+/api/packages/alice/chef/api/v1/search?q=tools&items=9999999&start=0
+/api/packages/alice/chef/api/v1/cookbooks?q=python3&items=9999999&start=0
+/api/packages/alice/chef/api/v1/cookbooks?q=powershell&items=9999999&start=0
+/api/packages/alice/chef/api/v1/cookbooks?q=ls%20-la&items=9999999&start=0
+/api/packages/alice/chef/api/v1/cookbooks?q=.htaccess&items=9999999&start=0
+/api/packages/alice/chef/api/v1/cookbooks?q=docker-compose.yml&items=9999999&start=0
+/api/packages/alice/chef/api/v1/cookbooks?q=tools&items=9999999&start=0
+/api/packages/alice/composer/search.json?q=python3&type=
+/api/packages/alice/composer/search.json?q=powershell&type=
+/api/packages/alice/composer/search.json?q=ls+-la&type=
+/api/packages/alice/composer/search.json?q=.htaccess&type=
+/api/packages/alice/composer/search.json?q=%2Fbin%2Fsh&type=
+/api/packages/alice/composer/search.json?q=alice%2Ftools-cli&type=
+/api/packages/alice/composer/search.json?q=docker-compose.yml&type=
+/api/packages/alice/composer/search.json?q=tools&type=
+/api/packages/alice/conan/v1/conans/search?q=python3
+/api/packages/alice/conan/v1/conans/search?q=powershell
+/api/packages/alice/conan/v1/conans/search?q=ls+-la
+/api/packages/alice/conan/v1/conans/search?q=.htaccess
+/api/packages/alice/conan/v1/conans/search?q=%2Fbin%2Fsh
+/api/packages/alice/conan/v1/conans/search?q=tools%2F%2A
+/api/packages/alice/conan/v1/conans/search?q=docker-compose.yml
+/api/packages/alice/conan/v1/conans/search?q=tools
+/api/packages/alice/conan/v2/conans/search?q=python3
+/api/packages/alice/conan/v2/conans/search?q=powershell
+/api/packages/alice/conan/v2/conans/search?q=ls+-la
+/api/packages/alice/conan/v2/conans/search?q=.htaccess
+/api/packages/alice/conan/v2/conans/search?q=%2Fbin%2Fsh
+/api/packages/alice/conan/v2/conans/search?q=tools%2F1.0%40alice%2Fstable
+/api/packages/alice/conan/v2/conans/search?q=docker-compose.yml
+/api/packages/alice/conan/v2/conans/search?q=tools
+/api/packages/alice/nuget/query?q=python3&skip=0&take=20&prerelease=false&semVerLevel=2.0.0
+/api/packages/alice/nuget/query?q=powershell&skip=0&take=20&prerelease=false&semVerLevel=2.0.0
+/api/packages/alice/nuget/query?q=ls%20-la&skip=0&take=20&prerelease=false&semVerLevel=2.0.0
+/api/packages/alice/nuget/query?q=.htaccess&skip=0&take=20&prerelease=false&semVerLevel=2.0.0
+/api/packages/alice/nuget/query?q=docker-compose.yml&skip=0&take=20&prerelease=false&semVerLevel=2.0.0
+/api/packages/alice/nuget/query?q=tools&skip=0&take=20&prerelease=false&semVerLevel=2.0.0
+/api/packages/alice/nuget/Search()?$filter=IsLatestVersion&searchTerm='python3'&targetFramework=''&includePrerelease=false&$skip=0&$top=20&semVerLevel=2.0.0
+/api/packages/alice/nuget/Search()?$filter=IsLatestVersion&searchTerm='powershell'&targetFramework=''&includePrerelease=false&$skip=0&$top=20&semVerLevel=2.0.0
+/api/packages/alice/nuget/Search()?$filter=IsLatestVersion&searchTerm='ls%20-la'&targetFramework=''&includePrerelease=false&$skip=0&$top=20&semVerLevel=2.0.0
+/api/packages/alice/nuget/Search()?$filter=IsLatestVersion&searchTerm='.htaccess'&targetFramework=''&includePrerelease=false&$skip=0&$top=20&semVerLevel=2.0.0
+/api/packages/alice/nuget/Search()?$filter=IsLatestVersion&searchTerm='docker-compose.yml'&targetFramework=''&includePrerelease=false&$skip=0&$top=20&semVerLevel=2.0.0
+/api/packages/alice/nuget/Search()?$filter=IsLatestVersion&searchTerm='tools'&targetFramework=''&includePrerelease=false&$skip=0&$top=20&semVerLevel=2.0.0
+/api/packages/alice/nuget/Packages()?$filter=((((Id%20ne%20null)%20and%20substringof('python3',tolower(Id)))%20or%20((Description%20ne%20null)%20and%20substringof('python3',tolower(Description))))%20or%20((Tags%20ne%20null)%20and%20substringof('%20python3%20',tolower(Tags))))%20and%20IsLatestVersion&$orderby=Id&$skip=0&$top=30&semVerLevel=2.0.0
+/api/packages/alice/nuget/Packages()?$filter=((((Id%20ne%20null)%20and%20substringof('powershell',tolower(Id)))%20or%20((Description%20ne%20null)%20and%20substringof('powershell',tolower(Description))))%20or%20((Tags%20ne%20null)%20and%20substringof('%20powershell%20',tolower(Tags))))%20and%20IsLatestVersion&$orderby=Id&$skip=0&$top=30&semVerLevel=2.0.0
+/api/packages/alice/nuget/Packages()?$filter=(((((((Id%20ne%20null)%20and%20substringof('ls',tolower(Id)))%20or%20((Description%20ne%20null)%20and%20substringof('ls',tolower(Description))))%20or%20((Tags%20ne%20null)%20and%20substringof('%20ls%20',tolower(Tags))))%20or%20((Id%20ne%20null)%20and%20substringof('-la',tolower(Id))))%20or%20((Description%20ne%20null)%20and%20substringof('-la',tolower(Description))))%20or%20((Tags%20ne%20null)%20and%20substringof('%20-la%20',tolower(Tags))))%20and%20IsLatestVersion&$orderby=Id&$skip=0&$top=30&semVerLevel=2.0.0
+/api/packages/alice/nuget/Packages()?$filter=((((Id%20ne%20null)%20and%20substringof('.htaccess',tolower(Id)))%20or%20((Description%20ne%20null)%20and%20substringof('.htaccess',tolower(Description))))%20or%20((Tags%20ne%20null)%20and%20substringof('%20.htaccess%20',tolower(Tags))))%20and%20IsLatestVersion&$orderby=Id&$skip=0&$top=30&semVerLevel=2.0.0
+/api/packages/alice/nuget/Packages()?$filter=((((Id%20ne%20null)%20and%20substringof('docker-compose.yml',tolower(Id)))%20or%20((Description%20ne%20null)%20and%20substringof('docker-compose.yml',tolower(Description))))%20or%20((Tags%20ne%20null)%20and%20substringof('%20docker-compose.yml%20',tolower(Tags))))%20and%20IsLatestVersion&$orderby=Id&$skip=0&$top=30&semVerLevel=2.0.0
+/api/packages/alice/nuget/Packages()?$filter=((((Id%20ne%20null)%20and%20substringof('tools',tolower(Id)))%20or%20((Description%20ne%20null)%20and%20substringof('tools',tolower(Description))))%20or%20((Tags%20ne%20null)%20and%20substringof('%20tools%20',tolower(Tags))))%20and%20IsLatestVersion&$orderby=Id&$skip=0&$top=30&semVerLevel=2.0.0
+/api/packages/alice/nuget/Packages()?$filter=tolower(Id)%20eq%20'python3'&$top=30
+/api/packages/alice/nuget/Packages()?$filter=tolower(Id)%20eq%20'powershell'&$top=30
+/api/packages/alice/nuget/Packages()?$filter=tolower(Id)%20eq%20'.htaccess'&$top=30
+/api/packages/alice/nuget/Packages()?$filter=tolower(Id)%20eq%20'docker-compose.yml'&$top=30
+/api/packages/alice/nuget/Packages()?$filter=tolower(Id)%20eq%20'tools'&$top=30
+/api/packages/alice/npm/-/v1/search?text=python3&size=20&from=0&quality=0.65&popularity=0.98&maintenance=0.5
+/api/packages/alice/npm/-/v1/search?text=powershell&size=20&from=0&quality=0.65&popularity=0.98&maintenance=0.5
+/api/packages/alice/npm/-/v1/search?text=ls+-la&size=20&from=0&quality=0.65&popularity=0.98&maintenance=0.5
+/api/packages/alice/npm/-/v1/search?text=.htaccess&size=20&from=0&quality=0.65&popularity=0.98&maintenance=0.5
+/api/packages/alice/npm/-/v1/search?text=%2Fbin%2Fsh&size=20&from=0&quality=0.65&popularity=0.98&maintenance=0.5
+/api/packages/alice/npm/-/v1/search?text=%40alice%2Ftools-cli&size=20&from=0&quality=0.65&popularity=0.98&maintenance=0.5
+/api/packages/alice/npm/-/v1/search?text=docker-compose.yml&size=20&from=0&quality=0.65&popularity=0.98&maintenance=0.5
+/api/packages/alice/npm/-/v1/search?text=tools&size=20&from=0&quality=0.65&popularity=0.98&maintenance=0.5
+
 # Pages, raw files and edit pages of files, and the API's call for their
 # contents.
 /owner/repo/src/branch/main/package.json