Checksumming the dependencies in the Gemfile may help. https://blog.rubygems.org/2024/12/19/bundler-v2-6.html
Accounts get compromised, no checksumming in the world can help with that.
Gemfile.lock checksums by default on bundler 4+
I have to use several gems that download and compile C sources from github at install time.
Accounts get compromised, no checksumming in the world can help with that.