ruby-advisory-db
A database of vulnerable Ruby Gems (by rubysec)
bundler-audit
Patch-level verification for Bundler (by rubysec)
ruby-advisory-db | bundler-audit | |
---|---|---|
2 | 5 | |
989 | 2,645 | |
0.5% | 0.2% | |
9.1 | 6.1 | |
5 days ago | 3 months ago | |
Ruby | Ruby | |
GNU General Public License v3.0 or later | GNU General Public License v3.0 or later |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
ruby-advisory-db
Posts with mentions or reviews of ruby-advisory-db.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-05-31.
-
4 Essential Security Tools To Level Up Your Rails Security
This Ruby gem is quite useful for detecting versions of gems that are known to be vulnerable to security issues. bundler-audit uses an open database of vulnerable gems called ruby-advisory-db and compares it to the versions that show up in your Gemfile.lock.
- Security checks for Ruby apps?
bundler-audit
Posts with mentions or reviews of bundler-audit.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-05-31.
-
4 Essential Security Tools To Level Up Your Rails Security
This Ruby gem is quite useful for detecting versions of gems that are known to be vulnerable to security issues. bundler-audit uses an open database of vulnerable gems called ruby-advisory-db and compares it to the versions that show up in your Gemfile.lock.
- How do you guys integrate automated security checks in your CI/CD pipelines?
-
What are the gems that every Ruby dev should know how to use?
bundler-audit - check for known security issues
- Hakiri has been sunset, any alternatives?
-
Security Risks On Rails: Misconfiguration and Unsafe Integrations
Let’s take the super famous gem bundler-audit, for instance. It works closely with bundler to provide patch-level verification for your project gems, such as vulnerability checks, insecure gem sources, etc.