Would your manager be more happy if you didn't use rails? Rails is a massive codebase with many vectors for attack and opportunites for performance issues. Does

Would your manager be more happy if you didn't use rails? Rails is a massive codebase with many vectors for attack and opportunites for performance issues. Does that mean your manager (or you) would rather code all this stuff from scratch? Tell your manager to consider all the benefits your team has gotten from working with rails weighed against the trouble of a patch or version bump deploy. Remind him/her that seeing these kinds of notices from the rails team is actually a good thing because it proves that there are eyes on the code base and a team of smart people reacting quickly when something gets noticed.