That is true! And it's also true that some environments require full code reviews of everything that isn't already certified. Hypothetically speaking, I don't

That is true! And it's also true that some environments require full code reviews of everything that isn't already certified. Hypothetically speaking, I don't know how you get around the fact that Ruby has way more code in it than any of the gems you'll want to pull in, but ignoring that, what's easier... getting a new gem certified, or writing just the parts you need and putting them through the normal review process? The answer is not going to be the same each time you ask it.