RubyGems
Fewer than 5 people recommend it so far, so there's no written verdict. Here is what commenters said.
2recommend
6warn against
Nov 7, 2025first mention
Oct 12, 2026latest mention
Why people recommend it
“I've been impressed by how well he is doing with it.”
“"Bundler includes checksums in new lockfiles by default" is the thing I'm most excited about.”
Caveats and dissent
“It was clear when Hiroshi Shibata nuked all prior developers from rubygems.org.”
“adding arbitrary 100.000 download limits”
Show 2 more
“the rubygems api was leaking users api keys due to some cache vulnerability”
“Rubygems is also affected”
Often compared with
From the makers not counted in the ranking
“I’m a volunteer, came on in October 2025”
volunteer at Ruby Central, joined Oct 2025on “Nobody pays for FOSS, we can force them to”
Threads where it came up
- Ruby already solved my problem 3 mentions
- Living in the Weimar Era of Ruby 1 mention
- Nobody pays for FOSS, we can force them to 1 mention
- Ruby Central's Destructive Legacy 1 mention
- Calling all open source maintainers working with Ruby 1 mention
- item 49028503 1 mention
Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 18
“It was clear when Hiroshi Shibata nuked all prior developers from rubygems.org.”
“I've been impressed by how well he is doing with it.”
“adding arbitrary 100.000 download limits”
“the rubygems api was leaking users api keys due to some cache vulnerability”
“Rubygems is also affected”
“https://docs.ruby-lang.org/en//master/Gem.html#method-c-post_install”
“RubyGems: https://www.sonatype.com/blog/anatomy-of-the-rubygems-rest-client-hack-and-getting-creative-about-open-source-security”
“Personally, if I want to find software, I use Google, Rubygems, or NPM.”
“rubygems.org is basically just shopifygems.org now”
“I stopped using rubygems.org myself”
“corporate-controlled rubygems.org”
I wrote some code to do almost this many years ago (if I recall correctly, it doesn’t cache anything to disk, but builds the hash fresh each time, which can still result in massive speed up). Probably obsolete and broken by now, but one of my favorite mini projects. (And I just realized the svg graph is all but impossible to read in dark mode) https://github.com/pmahoney/fastup
“"Bundler includes checksums in new lockfiles by default" is the thing I'm most excited about.”
“I could not accept any corporation trying to force me into maintaining old projects”
“See, for example, https://joel.drapper.me/p/rubygems-takeover/”
“It was deprecated on `rubygems` 3.0 and removed on `rubygems` 3.2”
“Instead it's, as you mentioned, a default library.”
“technically `Gem::Version` is part of `rubygems`”