|
1 | | -| 📍 NOTE | |
2 | | -|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| |
3 | | -| RubyGems.org was [recently compromised][draper-security] in a [hostile takeover][draper-takeover] about which [many lies][draper-lies] have been told. | |
4 | | -| I'm in the process of adding warnings to some important gems because I [don't condone the theft][draper-theft] of the bundler and rubygems-update projects. | |
5 | | -| Once publishing to [gem.coop][gem-coop] is available I will stop publishing to RubyGems.org, unless they make amends. I am writing my a new federated gem-server. | |
6 | | -| Please see [here][gem-coop] and [here][martin-ann] for more info on what comes next. This ["Technology for Humans" podcast episode][reinteractive-podcast] is the best summary I'm aware of. | |
7 | | - |
| 1 | +| 📍 NOTE | |
| 2 | +|-------------------------------------------------------------------------------------------------------------------------------------------------------------------| |
| 3 | +| RubyGems (the [GitHub org][rubygems-org], not the website) [suffered][draper-security] a [hostile takeover][ellen-takeover] in September 2025. | |
| 4 | +| Ultimately [4 maintainers][simi-removed] were [hard removed][martin-removed] and a reason has been given for only 1 of those, while 2 others resigned in protest. | |
| 5 | +| It is a [complicated story][draper-takeover] which is difficult to [parse quickly][draper-lies]. | |
| 6 | +| I'm adding notes like this to gems because I [don't condone theft][draper-theft] of repositories or gems from their rightful owners. | |
| 7 | +| If a similar theft happened with my repos/gems, I'd hope some would stand up for me. | |
| 8 | +| Disenfranchised former-maintainers have started [gem.coop][gem-coop]. | |
| 9 | +| Once available I will publish there exclusively; unless RubyCentral makes amends with the community. | |
| 10 | +| The ["Technology for Humans: Joel Draper"][reinteractive-podcast] podcast episode by [reinteractive][reinteractive] is the most cogent summary I'm aware of. | |
| 11 | +| See [here][gem-naming], [here][gem-coop] and [here][martin-ann] for more info on what comes next. | |
| 12 | +| What I'm doing: A (WIP) proposal for [bundler/gem scopes][gem-scopes], and a (WIP) proposal for a federated [gem server][gem-server]. | |
| 13 | + |
| 14 | +[rubygems-org]: https://github.com/rubygems/ |
8 | 15 | [draper-security]: https://joel.drapper.me/p/ruby-central-security-measures/ |
9 | 16 | [draper-takeover]: https://joel.drapper.me/p/ruby-central-takeover/ |
| 17 | +[ellen-takeover]: https://pup-e.com/blog/goodbye-rubygems/ |
| 18 | +[simi-removed]: https://www.reddit.com/r/ruby/s/gOk42POCaV |
| 19 | +[martin-removed]: https://bsky.app/profile/martinemde.com/post/3m3occezxxs2q |
10 | 20 | [draper-lies]: https://joel.drapper.me/p/ruby-central-fact-check/ |
11 | 21 | [draper-theft]: https://joel.drapper.me/p/ruby-central/ |
| 22 | +[reinteractive]: https://reinteractive.com/ruby-on-rails |
12 | 23 | [gem-coop]: https://gem.coop |
| 24 | +[gem-naming]: https://github.com/gem-coop/gem.coop/issues/12 |
13 | 25 | [martin-ann]: https://martinemde.com/2025/10/05/announcing-gem-coop.html |
| 26 | +[gem-scopes]: https://github.com/galtzo-floss/bundle-namespace |
| 27 | +[gem-server]: https://github.com/galtzo-floss/gem-server |
14 | 28 | [reinteractive-podcast]: https://youtu.be/_H4qbtC5qzU?si=BvuBU90R2wAqD2E6 |
15 | 29 |
|
16 | 30 | [![Galtzo FLOSS Logo by Aboling0, CC BY-SA 4.0][🖼️galtzo-i]][🖼️galtzo-discord] [![ruby-lang Logo, Yukihiro Matsumoto, Ruby Visual Identity Team, CC BY-SA 2.5][🖼️ruby-lang-i]][🖼️ruby-lang] [![kettle-test Logo by Aboling0, CC BY-SA 4.0][🖼️kettle-test-i]][🖼️kettle-test] |
@@ -799,7 +813,7 @@ Thanks for RTFM. ☺️ |
799 | 813 | [📌gitmoji]:https://gitmoji.dev |
800 | 814 | [📌gitmoji-img]:https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square |
801 | 815 | [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ |
802 | | -[🧮kloc-img]: https://img.shields.io/badge/KLOC-0.083-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue |
| 816 | +[🧮kloc-img]: https://img.shields.io/badge/KLOC-4.112-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue |
803 | 817 | [🔐security]: SECURITY.md |
804 | 818 | [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat |
805 | 819 | [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year |
|
0 commit comments