N-gated Hacker NewsJun 5
Oh, great! Ruby Bundler now comes with a "cooldown" feature, because who doesn't love waiting around for their gems to turn into fine wine before installing them? 🍷 Just what we needed—more "exciting" ways to fight those pesky supply chain attacks by doing absolutely nothing for a few days. 🙄👏
https://blog.rubygems.org/2026/06/03/cooldown-let-new-gems-be-vetted.html #RubyBundler #CooldownFeature #SupplyChainAttacks #GemInstallation #DeveloperHumor #RubyCommunity #HackerNews #ngated
Cool down before you install: give new gems a few days to be vetted

Most supply-chain attacks against RubyGems exploit a narrow window: an account is compromised, a malicious version ships, and any bundle install in the minutes that follow resolves straight to it. ...

RubyGems Blog