Sequent
RubyGems
| Sequent | RubyGems | |
|---|---|---|
| 5 | 25 | |
| 535 | 2,295 | |
| 0.2% | 0.2% | |
| 8.8 | 9.8 | |
| 29 days ago | 5 days ago | |
| Ruby | Ruby | |
| MIT License | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Sequent
-
OOP vs. services for organizing business logic: is there a third way?
Sequent – CQRS and event sourcing
-
Event Store with Rails
Co-author of the Sequent gem (https://www.sequent.io) here. Can confirm that it’s a great gem to build event sourced applications with (as long as you’re using PostgreSQL). It’s very battle tested as it has been extracted from/used in a web based accounting system that currently holds about 1 billion events in the event store.
- Accessing point in time data when data changes over time
-
Using CQRS in a simple Phoenix API with Commanded
I have been curious about the concepts of event sourcing and CQRS for a while— obsessively reading books like Practical Microservices (Garofolo) and Architecture Patterns with Python (Percival, Gregory), along with documentation for libraries like Sequent (Ruby), Commanded (Elixir).
RubyGems
-
Phlex is the ruby way to build your views
However, let's examine a typical partial, such as the one from the . rubygems.org search show page
- Chrome considers gems to be dangerous?
- Rubygems.org Hacked?
- Rubygems.org marked by Chrome as an “unsafe site”
-
OOP vs. services for organizing business logic: is there a third way?
github.com/rubygems/rubygems.org (26k lines): Where Ruby gems are hosted.
-
RubyGems now requires MFA for owners of top gems
If anyone is looking to do some open source contributions on a mature, production Ruby on Rails site, I highly recommend contributing to the rubygems.org project. The code is extremely clean and the repo is very, very well run.
https://github.com/rubygems/rubygems.org
- Rubygems packages found carrying out dependency confusion research
-
Making popular Ruby packages more secure
RubyGems does have gem signing, but it's not widely used.
There's a proposal for a new "one button" approach using sigstore[0].
Other ecosystems are also looking at sigstore too, and a lot of us are cooperating in the OpenSSF Securing Software Repos WG [1]. Package signing is a regular topic of discussion and there are various efforts underway.
Disclosure: I am involved with both of these.
[0] https://github.com/rubygems/rubygems.org/pull/2944
[1] https://github.com/ossf/wg-securing-software-repos
- Due to a bug in the yank action, it was possible for any RubyGems.org user to remove and replace certain gems even if that user was not authorized to do so.
What are some alternatives?
Rails Event Store - A Ruby implementation of an Event Store based on Active Record
Bundler
SimpleCommand - A simple, standardized way to build and use Service Objects (aka Commands) in Ruby
gemdiff - Find source repositories for ruby gems. Open, compare, and update outdated gem versions
Cells - View components for Ruby and Rails.
Gem in a Box - Really simple rubygem hosting
Clowne - A flexible gem for cloning models
gemstash - A RubyGems.org cache and private gem server
Trailblazer - The advanced business logic framework for Ruby.
passwordless - 🗝 Authentication for your Rails app without the icky-ness of passwords
Responders - A set of Rails responders to dry up your application
SharpZipLib - #ziplib is a Zip, GZip, Tar and BZip2 library written entirely in C# for the .NET platform.