Latest posts tagged with #RubyGems on Bluesky
Marco on the Ruby Community Conference stage
Well folks,
@marcoroth dropped a new #herb release on #RuCoCo and he packed some really nice goodies in it.
Don't claim later that nobody told you 😉
https://ruby.social/@marcoroth/116223917202960418
#Ruby #Rails #RubyOnRails #ActionView #ReActionView […]
[Original post on ruby.social]
📦 MIT licensed - install via #RubyGems, configure probes in YAML or Ruby classes
github.com/basecamp/up...
My thoughts on the RubyGems hostile takeover of September 2025, and what I'm doing about it. #Ruby #RubyGems #RubyCentral #Governance
dev.to/galtzo/hosti...
My thoughts on the RubyGems hostile takeover of September 2025, and what I'm doing about it. #Ruby #RubyGems #RubyCentral #Governance
dev.to/galtzo/hosti...
How to Manage Ruby Apps in cPanel
#cloudlinux #cpanel #rubyonrails #rubygems #sshaccess #sshcommands #Guides #Resellers #WebHosting
How to Deploy Forem on Rocky Linux VPS
#docker #forem #forum #forumsoftware #nginx #rockylinux #rubyonrails #rubygems #selfhosting #selfhosted #vps #Cloud #Guides #VPS
A nice writeup and background story about RubyGems takover from last month:
lwn.net/Articles/104...
I'm a proud paid subscriber of Linux Weekly News, and looking forward to be one for many years to come. You should too ;-)
#ruby #rubygems #infosec @lwndotnet.bsky.social
"I am concerned that Ruby Central’s board with full knowledge of the consequences and the alternatives voted to take over a collection of open source projects from their maintainers without consent. Especially when these maintainers were acting in good faith at the time. This is the organisation […]
~Socket~
The Ruby core team, led by creator Matz, is assuming stewardship of RubyGems and Bundler following a governance dispute.
-
IOCs: (None identified)
-
#OpenSource #Ruby #RubyGems #ThreatIntel
Hair brain #ruby / #rubygems idea:
What would it look like if an upstream `source` was a something something BitTorrent peer-to-peer kind of thing?
How would pushing work?
How would gem install work?
How would `bundle install/update` work?
How would client ensure no monkey business from upstream?
Community reaction to the Ruby core takeover is cautiously optimistic for stability. Yet, skepticism persists on whether Ruby Central's continued involvement truly addresses underlying trust and governance issues in the ecosystem. #RubyGems 2/6
Question for those of longer tooth than myself:
Was there ever a dustup like what Ruby is seeing right now in the Linux distro community?
I can't think of a single instance of people ever getting into a fight over who controls Debian, Red Hat, or Ubuntu, and I'm wondering if it's simple […]
~Socket~
A credential management failure at RubyGems resulted in a former maintainer retaining AWS root access, sparking a major community dispute over the incident's handling.
-
IOCs: (None identified)
-
#CloudSecurity #RubyGems #ThreatIntel
I posted this response twenty days ago at the beginning of the RubyGems drama. Timeline isn't clear but at least some of these possible theories seem to have been in play. Almost like people should let facts come out first. #RubyGems #security #lawyers
www.reddit.com/r/ruby/s/sC8...
~Socket~
Former RubyGems maintainers launched gem.coop, a community-run alternative, following a governance dispute with Ruby Central.
-
IOCs: gem. coop
-
#OpenSource #Ruby #RubyGems #ThreatIntel
Use ruby gems? If so, you should probably read this and some more f the material it links to. Bravo @overlookinfratech.com
overlookinfratech.com/2025/10/06/t...
[ #ruby #rubygems #puppet #openvox #voxpupuli ]
Overview: Hacker News discusses gem.coop, a RubyGems fork by former maintainers after Ruby Central's controversial takeover. Concerns include community fragmentation, security, and the overall direction of Ruby's infrastructure. #RubyGems 1/6
"Hey, get excited about gem.coop, a new Ruby gem hosting server!"
_clicks the link_
_is blocked by corporate firewall because they used a newfangled TLD_
... this does not fill me with hope for this project, but it does remind me that Ruby is an ecosystem where there aren't enough adults in […]
🔥 Breaking: Former #RubyGems maintainers have launched the Gem Cooperative, a community-run RubyGems server with open governance.
We spoke with the team behind it. Read the full story on the Socket blog
→ socket.dev/blog/gem-coo... #RubyLang #Ruby #Rails
By the way you can protect supply chains without taking over the #rubygems project, thats literally what immuteable releases and requiring signature sign off on repositories are for.
I even go so far as to set some things as public or private archives.
I don't know how this is going to play out.
It seems like maybe control of the #ruby ecosystem rests predominantly in the hands of Shopify though the proxy of Ruby Central.
Is this the case? I can't tell. Would that be bad? Probably in the long run. Is it bad optics that this is even a […]
More in-depth coverage from 404 about the Ruby Gems/Builder/Central drama currently in progress: www.404media.co/how-ruby-went-off-the-ra...
#ruby #rails #rubygems
Honestly, I don't really know what "Ruby" even is (or I didn't before this article). But, oh boy, the Internet is so complex and corporate-vulnerable on many levels that it's frightening to think of...
www.404media.co/how-ruby-went-off-the-ra...
#ruby […]
Things I worry about that I probably shouldn't.
world.hey.com/sean.hogge/t...
#Ruby #RubyCentral #RubyGems
What's happening in the Japanese Ruby community?
Do they have a RubyGems.org/Ruby Central alternative? Is there some kind of discussion going on there about the whole Shopify/sponsor influence?
#ruby #rubygems #rubycentral
In 2008, when I organized and held the first Ruby DCamp, I deliberately kept sponsors at arm's length. Their help was welcome (and necessary) but only without strings attached. Please do participate but do not expect influence or control of the event or others.
And that worked. They connected […]
Wow; just read about the #RubyGems debacle. (www.theregister.com/2025/09/22/r... )
Sounds like just another flavour of supply chain attack if you ask me.
Wow; just read about the #RubyGems debacle. (www.theregister.com/2025/09/22/ruby_central_... )
Sounds like just another flavour of supply chain attack if you ask me.
「RubyGems」のGitHub Enterpriseが勝手に「Ruby Central」に改名されて既存のメンテナが追放される事態が発生
#RubyGems #RubyCentral #ITニュース
