I believe [Code Climate](https://codeclimate.com/ https://codeclimate.com/) will report vulnerable gem versions in your app. Their marketing page suggests that

I believe [Code Climate](https://codeclimate.com/ https://codeclimate.com/) will report vulnerable gem versions in your app. Their marketing page suggests that they also analyze how you use a vulnerable library to see if you're affected or not.