- Home
- Ruby Static Analysis Tools
- bundler-audit
On the recordRead 5 Oct 202613 facts
bundler-audit
Plans and prices
bundler-audit
Free
GPL-3.0-or-later · Ruby gem
Read 5 Oct 2026 · github.com
On the record
- Advisory database
- The tool can update the ruby-advisory-db database and check a lockfile with or without updating it.github.com · read 5 Oct 2026
- Advisory handling
- It prints advisory information and allows users to ignore advisories that have been manually worked around.github.com · read 5 Oct 2026
- Insecure sources
- It checks for insecure gem sources using http:// and git://.github.com · read 5 Oct 2026
- Installation and requirements
- The project documents installation with gem install bundler-audit and lists Git, Ruby 2.0.0 or newer, RubyGems 1.8 or newer, Thor ~> 1.0, and Bundler 1.2.0 or newer as requirements.github.com · read 5 Oct 2026
- Integration
- Rake tasks are available for auditing a bundle and updating the vulnerability database.github.com · read 5 Oct 2026
- License
- The project is free software under GPL version 3 or later.github.com · read 5 Oct 2026
- Maintainer and support
- The README identifies Hal Brodigan in its copyright notice and directs users to GitHub Issues; it does not state a support service.github.com · read 5 Oct 2026
- Offline use
- The project says it does not require a network connection to run.github.com · read 5 Oct 2026
- Output and configuration
- It supports JSON output and a per-project configuration file for ignored advisory IDs.github.com · read 5 Oct 2026
- Purpose
- bundler-audit provides patch-level verification for Bundler projects.github.com · read 5 Oct 2026
- Release details
- RubyGems lists version 0.9.3, published November 28, 2025, with MFA used for publishing.rubygems.org · read 5 Oct 2026
- Vulnerable gems
- It checks Gemfile.lock for vulnerable gem versions.github.com · read 5 Oct 2026
