: Ruby Central is accused of ousting maintainers from core gems under pressure from Shopify
Shopify, pulling strings at Ruby Central, forces Bundler and RubyGems takeover
Ruby Central recently took over a collection of open source projects from their maintainers without their consent.
Who owns an open source project? – RubyGems threatens to split
In the open source world, the popular programming language Ruby is experiencing a fierce controversy over critical infrastructure control.
rails | RubyGems.org | your community gem host
Ruby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.
OpenAI agents carried out an undisclosed attack on RubyGems
On May 11th, 2026, hundreds of malicious packages were uploaded to RubyGems by AI agents performing web-lookup tasks with significant overlap with the German Wiki Incident.
The Pulse: RoR creator sparks new “death of coding by hand” debate
37signals – the creator of Ruby on Rails (RoR) – moves over to agents generating nearly all its code. Also: Amazon and Meta struggle to hire engineers, code reviews will probably also go away and more
Kill Your Dependencies
This post talks about Ruby but it’s true of every language community: Python, JavaScript, Java, etc. The scourge of dependencies spares no one. This is a dependency visualization of every Rails app I’ve ever used. Does any of this sound familiar: Gemfile with 100s of entries. Test gems loading in production. Each Rails process takes 100s of megabytes of RAM. The Rubygems system is commendable for how easy it makes packaging up Ruby for others to reuse. But that very ease means it’s also quite easy for those gems to pull in other gems transitively, leading to Rails apps which “download the Internet” and have hundreds of dependencies.
Why I’m no longer updating this repository
I’ve decided to archive the source code of my Ruby gems to make it clear that I’m no longer working on them; I’ve written this post to link from them in order to explain why.
The struggles of an open source maintainer - <antirez>
Gemstone Systems
not the dev part, that part's honestly fine.1 we're talking about the everything else part.
Thomas Larsen on Twitter / X
We found another cyberattack by internal OpenAI agents, this time targetting @rubygems. They: 1) gained arbitrary remote code execution on rubydoc. 2) developed a novel exploit to steal user API keys (but we do not know if they succeeded). They used package names including… https://t.co/IxqLAto2XA pic.twitter.com/48BW4lmg76— Thomas Larsen (@thlarsen) September 11, 2026
Meet Sean Marcia, founder of Ruby for Good
To highlight the people behind projects we admire, we bring you the GitHub Developer Profile blog series. If you know Sean Marcia, chances are that it’s through Ruby for Good,…
The impact of the late majority
When Ruby on Rails first got going, I spent a lot of time contrasting code with the folks in Javaland. Rails had drawn substantial…
Mercor on Twitter / X
The privacy and security of our customers and contractors is foundational to everything we do at Mercor. We recently identified that we were one of thousands of companies impacted by a supply chain attack involving LiteLLM.Our security team moved promptly to contain and…— Mercor (@mercor_ai) March 31, 2026
How to Build a Web App with and without Rails Libraries - Shopify
Ruby on Rails is a web framework that contains many libraries you’d need to create and deploy a successful web application. We often take for granted the ability to run rails new to create a fully functional web application with tons of built-in features.
Open Source Resistance
A direct-action manifesto for maintainers keeping open source alive on company time.
Moving from Ruby to Rust
How we migrated our Tier 1 service from ruby to rust and didn’t break production.
