4 ms·
I just wrote a simple script to check the gems: https://gist.github.com/dcu/3c06e4ab0e98158c5742c4fd2b31523d https://gist.github.com/dcu/3c06e4ab0e98158c5742c4
by dcu 11y ago
I just wrote a simple script to check the gems:
https://gist.github.com/dcu/3c06e4ab0e98158c5742c4fd2b31523d https://gist.github.com/dcu/3c06e4ab0e98158c5742c4fd2b31523d
- seanhandley 11y agoThis is really helpful - thanks!
- elcapitan 11y agoThanks! Probably depending on version, it seems to be missing a require 'time' require 'json' in my environment.
- revorad 11y agoThanks for this. So I ran this and found a bunch of unsafe gems. Do I report them to each gem author or to RubyGems security?
- davidradcliffe 11y agoIn this context "unsafe" only means not 100% verified.
- dcu 11y agoI think we should ask the gem owner to verify that everything is ok unless there's a new version. I updated the script to report if there is a new safe version available.
- brightshiny 11y agoThanks for this. I did some extra work on it (via someone else's fork) so it can run across multiple directories. I've too many projects lurking around to cd into all of them! I added some pretty colours too :) https://gist.github.com/yb66/44b97baecbeec6900e039ffb9461d31e https://gist.github.com/yb66/44b97baecbeec6900e039ffb9461d31...