Sunny Ripert

1759 days ago

strong_password v0.0.7 rubygem hijacked

withatwist.dev

I recently updated minor and patch versions of the gems our Rails app uses. We want to keep dependencies fresh, bugs fixed, security vulnerabilities addressed while maintaining a high chance of backward compatibility with our codebase. In all, it was 25 gems we’d upgrade.