Blog
Thoughts, tutorials, and insights on web development
—
Ruby
Ruby Community Crisis: Ruby Central's Hostile Takeover of RubyGems
2025-09-234
Comprehensive analysis of the unprecedented crisis in Ruby ecosystem when Ruby Central forcibly took control of critical RubyGems and Bundler infrastructure.
Ruby
Open Source
Governance
RubyGems
Bundler
Crisis
Blocking Unsafe Code: Security Audits in GitHub Actions
2025-09-017
Step-by-step guide to integrating bundler-audit, license_finder, and OSV Scanner into CI/CD pipelines — with YAML examples that block deployments until issues are fixed.
GitHub Actions
Ruby
Security
Supply Chain
DevSecOps
How RubyGems Protects Us From Supply Chain Attacks (And Why Every Ruby Developer Should Care)
2025-09-016
What happens behind the scenes during gem install: automated scanning, risk scoring, retroactive scanning, incident response — and why companies should support RubyGems critical infrastructure.
Ruby
RubyGems
Security
Supply Chain
DevSecOps