logoalt Hacker News

_joeltoday at 10:07 AM3 repliesview on HN

Checksumming the dependencies in the Gemfile may help. https://blog.rubygems.org/2024/12/19/bundler-v2-6.html


Replies

sscaryterrytoday at 6:52 PM

Accounts get compromised, no checksumming in the world can help with that.

manewitztoday at 5:57 PM

Gemfile.lock checksums by default on bundler 4+

rjswtoday at 1:01 PM

I have to use several gems that download and compile C sources from github at install time.