Demystifying the Ruby package ecosystem
summary
Explains exactly what happens when running gem install and bundle install: RubyGems install flow unpacks .gem tarballs from an S3-backed rubygems.org, writes specs and executables, and adds paths to Ruby’s load path; Bundler uses PubGrub resolver to produce a deterministic lockfile and uses the compact index to fetch versions; shows Rails binstubs, bundle show/open, gem pristine and git link workflows for debugging; highlights security work — rubygems.org hosts 190,000 gems, typo‑squatting checks, MFA and OIDC CI publishing.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 3:00Ruby gems importance
- 7:00How gem install works
- 14:17Bundler dependency resolution
- 23:17Managing gems in Rails
- 27:11Ruby ecosystem security risks
- 31:53Securing gems and accounts
- 34:08Key takeaways and closing remarks
