Ruby Central's Attack on RubyGems [pdf]

Post by ethagnawl » Fri, Sep 19, 2025, 1:50 PM UTC

hu3 wrote: post #5

Copy-pasted below for posterity in case it goes down because I think this is a huge deal: ## Ruby Central’s Attack on RubyGems Hi! I’m Ellen, but you probably know me as duckinator or puppy. I really wish I didn’t have to write this, but I feel the Ruby community needs to know it. I have been part of the Ruby community since I was 13, and one of the RubyGems maintainers for the last decade. This community has helped…

Post by drbragg » Fri, Sep 19, 2025, 1:58 PM UTC

RobotToaster wrote: post #30

bradgessler wrote: post #19

Earlier quoted context omitted.

Links: https://rubycentral.org/news/reflections-on-railsconf-2025-f... https://www.linkedin.com/in/shancureton

Someone with absolutely no technical background, a recipe for disaster.

Post by byroot » Fri, Sep 19, 2025, 2:00 PM UTC

tremon wrote: post #31

byroot wrote: post #25

Earlier quoted context omitted.

> What we've witnessed over the past week Who is "we"? And what did they witness? All we got right now is one side of the story. It is indeed surprising such change wouldn't be immediately followed by a public announcement, but they've been founding and managing RubyGems for a very long time now, so it's not even clear to me how this can be a "takeover". I'll happily join with my pitchfork if it turns out this is ind…

All we got right now is one side of the story That's because Ruby Central chooses not to communicate. I'm not going to reserve judgment against intentionally mute hostile actors.

Post by brightball » Fri, Sep 19, 2025, 2:01 PM UTC

eutropia wrote: post #8

Could someone with more insight as to the decision-making at Ruby Central weigh in on what's going on here? Between this and drama with the conferences over the years I'm just confused. They've been busy launching podcasts and doing fundraising, email campaigns and all that. Has there been a change in leadership?

Post by bradly » Fri, Sep 19, 2025, 2:04 PM UTC

byroot wrote: post #25

krmbzds wrote: post #13

The recent actions taken by Ruby Central - removing long-time RubyGems and Bundler maintainers without warning, seizing administrative access, and consolidating control under a small, centralized group - represent a serious breach of trust within the Ruby ecosystem. This was not a misunderstanding. It was a hostile takeover of key infrastructure, undermining both the long-standing maintainers and the broader communit…

> What we've witnessed over the past week Who is "we"? And what did they witness? All we got right now is one side of the story. It is indeed surprising such change wouldn't be immediately followed by a public announcement, but they've been founding and managing RubyGems for a very long time now, so it's not even clear to me how this can be a "takeover". I'll happily join with my pitchfork if it turns out this is ind…