Programs::InfrastructureAndSecurity

Infrastructure and security

The behind-the-scenes work of keeping RubyGems, Bundler, and RubyGems.org secure, stable, and ready for whatever the ecosystem throws at them.

Most of this work is invisible when it's going well — 24/7 on-call coverage, disaster recovery, supply chain security, and open source contributor support.What this includes:

  • Security audits and vulnerability response
  • Performance monitoring and optimization
  • Abuse prevention and package integrity
  • Dependency management for Bundler and RubyGems
  • Open source contributor support

This work is funded by sponsors and members.