Demystifying the Ruby package ecosystem

on YouTube ↗31m

" summary

Explains exactly what happens when gem install and bundle install run: RubyGems (hosting over 175 thousand gems) serves .gem files and metadata, the local install unpacks files and writes specs, and Bundler evaluates the Gemfile then resolves versions using the millennial resolver for single installs and pubgrub plus the compact index for apps. Shows how Rails auto-requires gems, uses bin stubs, and how to inspect or edit gems with bundle show/open and reset with gem pristine. Covers typo‑squatting defenses, MFA and OIDC publishing, and download counts (Rails ~half a billion) as risk signals.

AI-written summary · about

" chapters (5)

1. 0:00Introduction to dependencies
2. 4:07How gem install works
3. 11:15Understanding bundle install
4. 18:44Managing gems in Rails
5. 22:31Security and best practices

" related talks

• 35mMaking it on your own and the pitfalls of gem dependenciesNikki Murray, Maggie Epps · RubyConf 2015
• 38mCrafting GemsPat Allen · RailsConf 2013
• 32mEvolution of Rails within RubyGems.orgNick Quaranto, Samuel Giddins · RailsConf 2025
• 45m`bundle install` Y U SO SLOW: Server EditionTerence Lee · Ruby on Ales 2013
• 20mMaster the Rails Asset Pipeline: Best Practices for Apps & GemsAdrian Marin · RailsConf 2025
• 37mExtreme Makeover: Rubygems EditionAndre Arko · RubyFuza 2014
• 29mHow to Break into Reading Open SourceKasper Timm Hansen · EuRuKo 2024
• 01h 44mLet’s Extend Rails With A GemNoel Rappin · RailsConf 2024