top | item 31733342

(no title)

jshawl | 3 years ago

FWIW signed packages are available out of the box with rubygems: <http://docs.seattlerb.org/rubygems/Gem/Security.html>

discuss

order

jacques_chester|3 years ago

Yes, but rarely used -- it's clunky. When I scraped the top 10k gems, < 1% had valid and up-to-date signatures.

jupp0r|3 years ago

Notably, signatures are not checked by bundler when installing gems.