Ruby Central's Attack on RubyGems [pdf]

Re:Ruby Central's Attack on RubyGems [pdf] by jmuguy on Friday September 19, 2025 @10:28AM (#45302069)

So essentially they randomly cut off a bunch of long time maintainers for some vague legal and/or security reasons. If there was real reason to do that in a hurry, that's what we need to see, not a corporate PR message.

[ Parent | on HN ]

Re:Ruby Central's Attack on RubyGems [pdf] by awilson5454 on Friday September 19, 2025 @03:06PM (#45305218)

100%. I assumed this was inspired by the supply chain attack, but what a horrible way to address this. Reverting it back before revoking it a second time is even more bizarre. Severely mixed messages from leadership, perhaps?

[ Parent | on HN ]

Re:Ruby Central's Attack on RubyGems [pdf] by gedy on Friday September 19, 2025 @04:09PM (#45305953)

It’s not clear to me - did they entirely cut them off, or did they reduce their role as admin of the GitHub org?

If so, I'm not defending it, and I could understand why someone would feel insulted by that - but also get why an org doesn't want too many with elevated privileges.

[ Parent | on HN ]

Re:Ruby Central's Attack on RubyGems [pdf] by favorited on Friday September 19, 2025 @05:17PM (#45306731)

According to the author's PR where she removed herself as a maintainer, she lost commit access.

https://github.com/rubygems/rubygems/pull/8987

[ Parent | on HN ]