Back to Ruby
GSoC 2026

Ruby Vulnerability Warnings on RubyGems

Developers using Ruby gems have no official way to know when a gem they depend on has a known security vulnerability. This project integrates vulnerability warnings into RubyGems.org by syncing the rubysec advisory database, implementing version-range matching via Gem::Requirement, and surfacing warnings on gem detail pages, search results, and a new public API endpoint — all with independent implementation to respect GPL licensing boundaries.

Project details

Contributor

Harinish Sabapathi

Mentors

Not available

Technologies

Not listed in the archive