Cursed Bundler: Using go get to install Ruby Gems

kept by eddie jan 02

Go's module proxy and transparency log can be repurposed to fetch and verify Ruby gems with better integrity guarantees than RubyGems itself.

Can Bundler be as fast as uv?
Aaron Patterson argues Bundler can match uv's speed through design changes like parallel installation and a global cache, not just a Rust rewrite.
also on RubyGems, Bundler, #open-source, #developer-tools
What Active Rubyists Are Using in 2026: A Maintainer's Read of the RubyKaigi Survey - DEV Community
A maintainer's analysis of RubyKaigi 2026 survey data reveals that Ruby 4.0 adoption matches 3.4 within six months, Claude Code dominates at 80% usage, and VS Code/Cursor lead editors while mise/asdf challenge rbenv.
also on RubyGems, Bundler, #developer-tools
Package Managers Need to Cool Down
A survey finds that while many package managers and update tools have adopted dependency cooldowns to prevent supply chain attacks, implementations vary wildly in naming, scope, and timestamp handling, and major ecosystems like Go, Maven, and Gradle still lack support.
also on #supply-chain-security, Bundler, #open-source, #developer-tools
How to Evaluate an npm Package - 2026 Edition
A practical checklist for evaluating npm packages in 2026 covering security, maintenance, provenance, CI quality, and incident response to make informed dependency decisions.
also on #supply-chain-security, #open-source, #developer-tools
Vite 8.1 is out!
Vite 8.1 introduces experimental bundled dev mode for faster startup in large apps, chunk import maps, Wasm ESM support, and moves toward Lightning CSS by default.
also on Bundler, #open-source, #developer-tools