rubion 0.3.10 → 0.3.12
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/README.md +148 -69
- data/lib/rubion/version.rb +1 -1
- data/rubion.gemspec +22 -22
- metadata +3 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 7dc1bfbae3334e5454a9cc24e15284f6ea266e6ae39c0d897e834cdbd4a060b2
|
|
4
|
+
data.tar.gz: 99397bc977a084f856a850dbc32401a72d302ce3f55243b4a09f9660224168fd
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 78c7ccc9ac63d82a38d704d47f626e3ec1ba08976d10e3efbfe6ef35f5fb15d5424c61219d00034d11cee5e25f77b5a7b971406400e6744e5e005e9e9e9cf87a
|
|
7
|
+
data.tar.gz: ebda62b7ec502a9e834a41b45953996363289b5c63f3ce3b6da380beaf96dfd47f5476e56f65babca314c3cd01624a5601cf607c4e1bd4884ef704d1be270e99
|
data/README.md
CHANGED
|
@@ -1,8 +1,8 @@
|
|
|
1
|
-
#
|
|
1
|
+
# Rubion
|
|
2
2
|
|
|
3
3
|
**Rubion** is a security and version scanner for Ruby and JavaScript projects. It helps you identify vulnerabilities and outdated dependencies in your Ruby gems and NPM/JavaScript packages.
|
|
4
4
|
|
|
5
|
-
<img width="1237" height="671" alt="Screenshot 2025-11-14 at 10 48 12
|
|
5
|
+
<img width="1237" height="671" alt="Screenshot 2025-11-14 at 10 48 12 am" src="https://github.com/user-attachments/assets/a3d93452-c442-416a-9697-de59746e16ad" />
|
|
6
6
|
|
|
7
7
|
## Features
|
|
8
8
|
|
|
@@ -10,15 +10,19 @@
|
|
|
10
10
|
- 📦 **Gem Versions**: Identifies outdated Ruby gems with release dates and version counts
|
|
11
11
|
- 📛 **Package Vulnerabilities**: Scans for known security vulnerabilities in NPM/JavaScript packages using `npm audit` or `yarn audit`
|
|
12
12
|
- 📦 **Package Versions**: Identifies outdated NPM/JavaScript packages with release dates and version counts
|
|
13
|
+
- 🎯 **Direct Dependencies**: Highlights direct dependencies (from `Gemfile`/`package.json`) in bold text
|
|
14
|
+
- 🔍 **Filtering**: Option to show only direct dependencies with `--exclude-dependencies` flag
|
|
15
|
+
- 📊 **Sorting**: Sort results by any column (Name, Current, Date, Latest, Behind By(Time), Behind By(Versions))
|
|
13
16
|
- 📊 **Beautiful Reports**: Organized table output with severity icons (🔴 Critical, 🟠 High, 🟡 Medium, 🟢 Low, ⚪ Unknown)
|
|
14
17
|
- 🚀 **Fast & Efficient**: Parallel API processing (10 concurrent threads) for quick results
|
|
15
18
|
- ⚡ **Incremental Output**: Shows gem results immediately, then scans packages
|
|
16
19
|
- 📅 **Release Dates**: Fetches actual release dates from RubyGems.org and NPM registry
|
|
17
20
|
- 🔢 **Version Analysis**: Shows how many versions behind and time difference
|
|
21
|
+
- 📦 **Multi-Package Manager**: Supports both npm and yarn with automatic detection
|
|
18
22
|
|
|
19
23
|
## Installation
|
|
20
24
|
|
|
21
|
-
### Install from RubyGems
|
|
25
|
+
### Install from RubyGems
|
|
22
26
|
|
|
23
27
|
```bash
|
|
24
28
|
gem install rubion
|
|
@@ -27,7 +31,7 @@ gem install rubion
|
|
|
27
31
|
### Install from source
|
|
28
32
|
|
|
29
33
|
```bash
|
|
30
|
-
git clone https://github.com/
|
|
34
|
+
git clone https://github.com/bipashant/rubion.git
|
|
31
35
|
cd rubion
|
|
32
36
|
bundle install
|
|
33
37
|
rake install_local
|
|
@@ -35,7 +39,7 @@ rake install_local
|
|
|
35
39
|
|
|
36
40
|
## Usage
|
|
37
41
|
|
|
38
|
-
### Scan
|
|
42
|
+
### Basic Scan
|
|
39
43
|
|
|
40
44
|
Navigate to your project directory and run:
|
|
41
45
|
|
|
@@ -49,7 +53,7 @@ This will scan your project for:
|
|
|
49
53
|
- NPM/JavaScript package vulnerabilities (if `package.json` exists)
|
|
50
54
|
- Outdated NPM/JavaScript packages with release dates
|
|
51
55
|
|
|
52
|
-
### Scan
|
|
56
|
+
### Scan Options
|
|
53
57
|
|
|
54
58
|
```bash
|
|
55
59
|
# Scan only Ruby gems (skip NPM packages)
|
|
@@ -66,13 +70,57 @@ rubion scan -p
|
|
|
66
70
|
rubion scan
|
|
67
71
|
```
|
|
68
72
|
|
|
69
|
-
###
|
|
73
|
+
### Sorting Options
|
|
74
|
+
|
|
75
|
+
```bash
|
|
76
|
+
# Sort by column name (default: "Behind By(Time)" in descending order)
|
|
77
|
+
rubion scan --sort-by Name
|
|
78
|
+
rubion scan --sort-by Current
|
|
79
|
+
rubion scan --sort-by "Current version released on"
|
|
80
|
+
rubion scan --sort-by Latest
|
|
81
|
+
rubion scan --sort-by "Latest version released on"
|
|
82
|
+
rubion scan --sort-by "Behind By(Time)"
|
|
83
|
+
rubion scan --sort-by "Behind By(Versions)"
|
|
84
|
+
|
|
85
|
+
# Short form
|
|
86
|
+
rubion scan -s Name
|
|
87
|
+
|
|
88
|
+
# Sort in ascending order
|
|
89
|
+
rubion scan --sort-by Name --asc
|
|
90
|
+
rubion scan --sort-by Name --ascending
|
|
91
|
+
|
|
92
|
+
# Sort in descending order (default)
|
|
93
|
+
rubion scan --sort-by Name --desc
|
|
94
|
+
rubion scan --sort-by Name --descending
|
|
95
|
+
```
|
|
96
|
+
|
|
97
|
+
**Available columns for sorting:**
|
|
98
|
+
- `Name` - Package/gem name
|
|
99
|
+
- `Current` - Current version
|
|
100
|
+
- `Current version released on` or `Date` - Release date of current version
|
|
101
|
+
- `Latest` - Latest version
|
|
102
|
+
- `Latest version released on` or `Date` - Release date of latest version
|
|
103
|
+
- `Behind By(Time)` - Time difference (default sort, descending)
|
|
104
|
+
- `Behind By(Versions)` - Number of versions behind
|
|
105
|
+
|
|
106
|
+
### Filtering Options
|
|
107
|
+
|
|
108
|
+
```bash
|
|
109
|
+
# Show only direct dependencies (from Gemfile/package.json)
|
|
110
|
+
rubion scan --exclude-dependencies
|
|
111
|
+
```
|
|
112
|
+
|
|
113
|
+
Direct dependencies are automatically highlighted in **bold text** in the output.
|
|
114
|
+
|
|
115
|
+
### View Help
|
|
70
116
|
|
|
71
117
|
```bash
|
|
72
118
|
rubion help
|
|
119
|
+
# or
|
|
120
|
+
rubion -h
|
|
73
121
|
```
|
|
74
122
|
|
|
75
|
-
### Check
|
|
123
|
+
### Check Version
|
|
76
124
|
|
|
77
125
|
```bash
|
|
78
126
|
rubion version
|
|
@@ -82,6 +130,8 @@ rubion -v
|
|
|
82
130
|
|
|
83
131
|
## Output Example
|
|
84
132
|
|
|
133
|
+
### Complete Scan Output
|
|
134
|
+
|
|
85
135
|
```
|
|
86
136
|
🔍 Scanning project at: /path/to/project
|
|
87
137
|
|
|
@@ -94,16 +144,22 @@ Gem Vulnerabilities:
|
|
|
94
144
|
+----------+--------+---------+------------------------------------------+
|
|
95
145
|
| 🔴 Critical | rexml | 3.4.1 | REXML has DoS condition when parsing... |
|
|
96
146
|
| 🟠 High | rack | 2.0.8 | Denial of Service vulnerability |
|
|
147
|
+
| 🟡 Medium | nokogiri | 1.13.8 | XML parsing vulnerability |
|
|
148
|
+
| 🟢 Low | json | 2.6.1 | JSON parsing issue |
|
|
97
149
|
+----------+--------+---------+------------------------------------------+
|
|
98
150
|
|
|
99
151
|
Gem Versions:
|
|
100
152
|
|
|
101
|
-
|
|
102
|
-
| Name
|
|
103
|
-
|
|
104
|
-
| sidekiq
|
|
105
|
-
|
|
|
106
|
-
|
|
153
|
+
+------------------+---------+--------------------------+---------+--------------------------+------------------+-------------------+
|
|
154
|
+
| Name | Current | Current version released on | Latest | Latest version released on | Behind By(Time) ↓ | Behind By(Versions) |
|
|
155
|
+
+------------------+---------+--------------------------+---------+--------------------------+------------------+-------------------+
|
|
156
|
+
| sidekiq | 7.30 | 3/5/2024 | 8.1 | 11/11/2025 | 1 year | 15 |
|
|
157
|
+
| rails | 7.0.0 | 12/15/2022 | 7.1.0 | 10/4/2024 | 1 year 10 months | 8 |
|
|
158
|
+
| fastimage | 2.2.7 | 2/2/2025 | 2.3.2 | 9/9/2025 | 7 months | 3 |
|
|
159
|
+
| nokogiri | 1.13.8 | 5/10/2023 | 1.15.0 | 8/20/2024 | 1 year 3 months | 12 |
|
|
160
|
+
| redis | 4.8.0 | 1/15/2023 | 5.0.0 | 11/1/2024 | 1 year 9 months | 20 |
|
|
161
|
+
| pg | 1.4.0 | 3/20/2023 | 1.5.0 | 9/15/2024 | 1 year 5 months | 6 |
|
|
162
|
+
+------------------+---------+--------------------------+---------+--------------------------+------------------+-------------------+
|
|
107
163
|
|
|
108
164
|
📦 Checking NPM packages... 45/45 ✓
|
|
109
165
|
|
|
@@ -112,18 +168,44 @@ Package Vulnerabilities:
|
|
|
112
168
|
+----------+--------+---------+------------------------------------------+
|
|
113
169
|
| Level | Name | Version | Vulnerability |
|
|
114
170
|
+----------+--------+---------+------------------------------------------+
|
|
115
|
-
|
|
|
171
|
+
| 🔴 Critical | lodash | 4.17.20 | Prototype pollution vulnerability |
|
|
172
|
+
| 🟠 High | moment | 2.29.1 | Wrong timezone date calculation |
|
|
173
|
+
| 🟡 Medium | axios | 0.21.1 | Server-Side Request Forgery (SSRF) |
|
|
174
|
+
| 🟢 Low | debug | 4.3.1 | Regular Expression Denial of Service |
|
|
116
175
|
+----------+--------+---------+------------------------------------------+
|
|
117
176
|
|
|
118
177
|
Package Versions:
|
|
119
178
|
|
|
120
|
-
|
|
121
|
-
| Name
|
|
122
|
-
|
|
123
|
-
|
|
|
124
|
-
|
|
179
|
+
+------------------+---------+--------------------------+---------+--------------------------+------------------+-------------------+
|
|
180
|
+
| Name | Current | Current version released on | Latest | Latest version released on | Behind By(Time) ↓ | Behind By(Versions) |
|
|
181
|
+
+------------------+---------+--------------------------+---------+--------------------------+------------------+-------------------+
|
|
182
|
+
| react | 17.0.2 | 3/3/2021 | 18.2.0 | 6/14/2023 | 2 years 3 months | 45 |
|
|
183
|
+
| vue | 3.2.0 | 8/5/2021 | 3.3.0 | 5/18/2023 | 1 year 9 months | 8 |
|
|
184
|
+
| jquery | 3.7.1 | 4/5/2024 | 3.9.1 | 10/11/2025 | 1 year | 8 |
|
|
185
|
+
| express | 4.18.0 | 4/25/2022 | 4.18.2 | 8/15/2023 | 1 year 3 months | 2 |
|
|
186
|
+
| webpack | 5.70.0 | 3/1/2022 | 5.88.0 | 6/1/2023 | 1 year 3 months | 18 |
|
|
187
|
+
| typescript | 4.7.0 | 5/24/2022 | 5.1.0 | 5/25/2023 | 1 year | 12 |
|
|
188
|
+
+------------------+---------+--------------------------+---------+--------------------------+------------------+-------------------+
|
|
125
189
|
```
|
|
126
190
|
|
|
191
|
+
### Direct Dependencies Only (with --exclude-dependencies)
|
|
192
|
+
|
|
193
|
+
When using `rubion scan --exclude-dependencies`, only direct dependencies are shown:
|
|
194
|
+
|
|
195
|
+
```
|
|
196
|
+
Gem Versions:
|
|
197
|
+
|
|
198
|
+
+----------+---------+--------------------------+---------+--------------------------+------------------+-------------------+
|
|
199
|
+
| Name | Current | Current version released on | Latest | Latest version released on | Behind By(Time) ↓ | Behind By(Versions) |
|
|
200
|
+
+----------+---------+--------------------------+---------+--------------------------+------------------+-------------------+
|
|
201
|
+
| **rails**| 7.0.0 | 12/15/2022 | 7.1.0 | 10/4/2024 | 1 year 10 months | 8 |
|
|
202
|
+
| **sidekiq**| 7.30 | 3/5/2024 | 8.1 | 11/11/2025 | 1 year | 15 |
|
|
203
|
+
| **pg** | 1.4.0 | 3/20/2023 | 1.5.0 | 9/15/2024 | 1 year 5 months | 6 |
|
|
204
|
+
+----------+---------+--------------------------+---------+--------------------------+------------------+-------------------+
|
|
205
|
+
```
|
|
206
|
+
|
|
207
|
+
**Note:** Direct dependencies (from `Gemfile` or `package.json`) are displayed in **bold text** in the version tables. In the example above, `rails`, `sidekiq`, and `pg` are direct dependencies from the `Gemfile`.
|
|
208
|
+
|
|
127
209
|
## Requirements
|
|
128
210
|
|
|
129
211
|
- Ruby 2.6 or higher
|
|
@@ -131,7 +213,7 @@ Package Versions:
|
|
|
131
213
|
- NPM or Yarn (optional, for JavaScript package scanning)
|
|
132
214
|
- `bundler-audit` (optional, for enhanced gem vulnerability detection)
|
|
133
215
|
|
|
134
|
-
**Note:** If both npm and yarn are available, Rubion will prompt you to choose which one to use.
|
|
216
|
+
**Note:** If both npm and yarn are available, Rubion will prompt you to choose which one to use. You can respond with 'y' for yarn or 'n' for npm.
|
|
135
217
|
|
|
136
218
|
### Installing bundler-audit (recommended)
|
|
137
219
|
|
|
@@ -141,6 +223,48 @@ gem install bundler-audit
|
|
|
141
223
|
|
|
142
224
|
**Note:** Without `bundler-audit`, gem vulnerability scanning will be skipped.
|
|
143
225
|
|
|
226
|
+
## How It Works
|
|
227
|
+
|
|
228
|
+
Rubion uses a modular architecture:
|
|
229
|
+
|
|
230
|
+
1. **Scanner** (`lib/rubion/scanner.rb`): Executes various commands to scan for vulnerabilities and outdated versions
|
|
231
|
+
- `bundle-audit check` for gem vulnerabilities
|
|
232
|
+
- `bundle outdated --parseable` for gem versions
|
|
233
|
+
- `npm audit --json` or `yarn audit --json` for package vulnerabilities (auto-detects which is available)
|
|
234
|
+
- `npm outdated --json` or `yarn outdated` for package versions (auto-detects which is available)
|
|
235
|
+
- Fetches release dates and version data from RubyGems.org and NPM registry APIs
|
|
236
|
+
- Uses parallel processing (10 concurrent threads) for fast API calls
|
|
237
|
+
- Prompts user to choose between npm and yarn if both are available
|
|
238
|
+
- Parses `Gemfile` and `package.json` to identify direct dependencies
|
|
239
|
+
|
|
240
|
+
2. **Reporter** (`lib/rubion/reporter.rb`): Formats scan results into beautiful terminal tables using `terminal-table`
|
|
241
|
+
- Adds severity icons (🔴 🟠 🟡 🟢 ⚪)
|
|
242
|
+
- Formats dates, time differences, and version counts
|
|
243
|
+
- Supports incremental output (gems first, then packages)
|
|
244
|
+
- Highlights direct dependencies in bold text
|
|
245
|
+
- Supports sorting by any column with visual indicators (↑/↓)
|
|
246
|
+
- Filters results based on `--exclude-dependencies` flag
|
|
247
|
+
|
|
248
|
+
3. **CLI** (`lib/rubion.rb`): Provides the command-line interface
|
|
249
|
+
- Parses command-line options (`--gems-only`, `--packages-only`, `--sort-by`, `--asc`, `--desc`, `--exclude-dependencies`)
|
|
250
|
+
- Coordinates scanning and reporting
|
|
251
|
+
|
|
252
|
+
For detailed information about data collection and mapping, see [HOW_IT_WORKS.md](HOW_IT_WORKS.md).
|
|
253
|
+
|
|
254
|
+
## Performance
|
|
255
|
+
|
|
256
|
+
Rubion is optimized for speed:
|
|
257
|
+
|
|
258
|
+
- **Parallel API Processing**: Uses 10 concurrent threads to fetch version data from RubyGems.org and NPM registry
|
|
259
|
+
- **Single API Call Per Package**: Fetches all necessary data (dates, version list) in one request
|
|
260
|
+
- **Incremental Output**: Shows gem results immediately, then scans packages (better UX)
|
|
261
|
+
- **Progress Indicators**: Shows real-time progress like "Checking Ruby gems... 10/54"
|
|
262
|
+
|
|
263
|
+
Typical scan times:
|
|
264
|
+
- Gems only: ~4-5 seconds (for ~140 gems)
|
|
265
|
+
- Packages only: ~3-4 seconds (for ~50 packages)
|
|
266
|
+
- Both: ~7-9 seconds total
|
|
267
|
+
|
|
144
268
|
## Development
|
|
145
269
|
|
|
146
270
|
After checking out the repo, run `bin/setup` to install dependencies. Then, run `rake spec` to run the tests. You can also run `bin/console` for an interactive prompt.
|
|
@@ -169,30 +293,6 @@ gem build rubion.gemspec
|
|
|
169
293
|
rake install_local
|
|
170
294
|
```
|
|
171
295
|
|
|
172
|
-
## How It Works
|
|
173
|
-
|
|
174
|
-
Rubion uses a modular architecture:
|
|
175
|
-
|
|
176
|
-
1. **Scanner** (`lib/rubion/scanner.rb`): Executes various commands to scan for vulnerabilities and outdated versions
|
|
177
|
-
- `bundle-audit check` for gem vulnerabilities
|
|
178
|
-
- `bundle outdated --parseable` for gem versions
|
|
179
|
-
- `npm audit --json` or `yarn audit --json` for package vulnerabilities (auto-detects which is available)
|
|
180
|
-
- `npm outdated --json` or `yarn outdated --json` for package versions (auto-detects which is available)
|
|
181
|
-
- Fetches release dates and version data from RubyGems.org and NPM registry APIs
|
|
182
|
-
- Uses parallel processing (10 concurrent threads) for fast API calls
|
|
183
|
-
- Prompts user to choose between npm and yarn if both are available
|
|
184
|
-
|
|
185
|
-
2. **Reporter** (`lib/rubion/reporter.rb`): Formats scan results into beautiful terminal tables using `terminal-table`
|
|
186
|
-
- Adds severity icons (🔴 🟠 🟡 🟢 ⚪)
|
|
187
|
-
- Formats dates, time differences, and version counts
|
|
188
|
-
- Supports incremental output (gems first, then packages)
|
|
189
|
-
|
|
190
|
-
3. **CLI** (`lib/rubion.rb`): Provides the command-line interface
|
|
191
|
-
- Parses command-line options (`--gems-only`, `--packages-only`)
|
|
192
|
-
- Coordinates scanning and reporting
|
|
193
|
-
|
|
194
|
-
For detailed information about data collection and mapping, see [HOW_IT_WORKS.md](HOW_IT_WORKS.md).
|
|
195
|
-
|
|
196
296
|
## Extending Rubion
|
|
197
297
|
|
|
198
298
|
Rubion is designed to be easily extensible. To add new scanners:
|
|
@@ -218,7 +318,7 @@ end
|
|
|
218
318
|
|
|
219
319
|
## Contributing
|
|
220
320
|
|
|
221
|
-
Bug reports and pull requests are welcome on GitHub at https://github.com/
|
|
321
|
+
Bug reports and pull requests are welcome on GitHub at https://github.com/bipashant/rubion.
|
|
222
322
|
|
|
223
323
|
1. Fork it
|
|
224
324
|
2. Create your feature branch (`git checkout -b feature/my-new-feature`)
|
|
@@ -230,36 +330,16 @@ Bug reports and pull requests are welcome on GitHub at https://github.com/yourus
|
|
|
230
330
|
|
|
231
331
|
The gem is available as open source under the terms of the [MIT License](https://opensource.org/licenses/MIT).
|
|
232
332
|
|
|
233
|
-
## Code of Conduct
|
|
234
|
-
|
|
235
|
-
Everyone interacting in the Rubion project's codebases, issue trackers, chat rooms and mailing lists is expected to follow the code of conduct.
|
|
236
|
-
|
|
237
333
|
## Support
|
|
238
334
|
|
|
239
335
|
If you have any questions or need help, please:
|
|
240
|
-
- Open an issue on GitHub
|
|
336
|
+
- Open an issue on GitHub: https://github.com/bipashant/rubion/issues
|
|
241
337
|
- Check the documentation
|
|
242
|
-
-
|
|
243
|
-
|
|
244
|
-
## Performance
|
|
245
|
-
|
|
246
|
-
Rubion is optimized for speed:
|
|
247
|
-
|
|
248
|
-
- **Parallel API Processing**: Uses 10 concurrent threads to fetch version data from RubyGems.org and NPM registry
|
|
249
|
-
- **Single API Call Per Package**: Fetches all necessary data (dates, version list) in one request
|
|
250
|
-
- **Incremental Output**: Shows gem results immediately, then scans packages (better UX)
|
|
251
|
-
- **Progress Indicators**: Shows real-time progress like "Checking Ruby gems... 10/54"
|
|
252
|
-
|
|
253
|
-
Typical scan times:
|
|
254
|
-
- Gems only: ~4-5 seconds (for ~140 gems)
|
|
255
|
-
- Packages only: ~3-4 seconds (for ~50 packages)
|
|
256
|
-
- Both: ~7-9 seconds total
|
|
338
|
+
- Review the [CHANGELOG.md](CHANGELOG.md) for recent changes
|
|
257
339
|
|
|
258
340
|
## Roadmap
|
|
259
341
|
|
|
260
342
|
Future features planned:
|
|
261
|
-
- [ ] Sorting options (by severity, name, date, etc.)
|
|
262
|
-
- [ ] Filtering options (by severity, outdated threshold, etc.)
|
|
263
343
|
- [ ] Export formats (JSON, CSV, HTML)
|
|
264
344
|
- [ ] Summary statistics
|
|
265
345
|
- [ ] Update command suggestions
|
|
@@ -275,4 +355,3 @@ Future features planned:
|
|
|
275
355
|
|
|
276
356
|
- Built with [terminal-table](https://github.com/tj/terminal-table)
|
|
277
357
|
- Inspired by tools like `bundle-audit` and `npm audit`
|
|
278
|
-
|
data/lib/rubion/version.rb
CHANGED
data/rubion.gemspec
CHANGED
|
@@ -1,36 +1,36 @@
|
|
|
1
1
|
# frozen_string_literal: true
|
|
2
2
|
|
|
3
|
-
require_relative
|
|
3
|
+
require_relative 'lib/rubion/version'
|
|
4
4
|
|
|
5
5
|
Gem::Specification.new do |spec|
|
|
6
|
-
spec.name =
|
|
6
|
+
spec.name = 'rubion'
|
|
7
7
|
spec.version = Rubion::VERSION
|
|
8
|
-
spec.authors = [
|
|
9
|
-
spec.email = [
|
|
8
|
+
spec.authors = ['bipashant']
|
|
9
|
+
spec.email = ['bs_chapagain@hotmail.com']
|
|
10
10
|
|
|
11
|
-
spec.summary =
|
|
12
|
-
spec.description =
|
|
13
|
-
spec.homepage =
|
|
14
|
-
spec.license =
|
|
15
|
-
spec.required_ruby_version =
|
|
11
|
+
spec.summary = 'Security and version scanner for Ruby and JavaScript projects'
|
|
12
|
+
spec.description = 'Rubion scans your project for Ruby gem vulnerabilities, outdated gems, NPM package vulnerabilities, and outdated packages. It provides a clean, organized report with actionable insights.'
|
|
13
|
+
spec.homepage = 'https://github.com/bipashant/rubion'
|
|
14
|
+
spec.license = 'MIT'
|
|
15
|
+
spec.required_ruby_version = '>= 2.6.0'
|
|
16
16
|
|
|
17
|
-
spec.metadata[
|
|
18
|
-
spec.metadata[
|
|
19
|
-
spec.metadata[
|
|
20
|
-
spec.metadata[
|
|
17
|
+
spec.metadata['homepage_uri'] = spec.homepage
|
|
18
|
+
spec.metadata['source_code_uri'] = 'https://github.com/bipashant/rubion'
|
|
19
|
+
spec.metadata['changelog_uri'] = 'https://github.com/bipashant/rubion/blob/main/CHANGELOG.md'
|
|
20
|
+
spec.metadata['bug_tracker_uri'] = 'https://github.com/bipashant/rubion/issues'
|
|
21
|
+
spec.metadata['rubygems_mfa_required'] = 'true'
|
|
21
22
|
|
|
22
23
|
# Specify which files should be added to the gem when it is released.
|
|
23
|
-
spec.files = Dir.glob(
|
|
24
|
-
spec.bindir =
|
|
25
|
-
spec.executables = [
|
|
26
|
-
spec.require_paths = [
|
|
24
|
+
spec.files = Dir.glob('{bin,lib}/**/*') + %w[README.md LICENSE Gemfile rubion.gemspec]
|
|
25
|
+
spec.bindir = 'bin'
|
|
26
|
+
spec.executables = ['rubion']
|
|
27
|
+
spec.require_paths = ['lib']
|
|
27
28
|
|
|
28
29
|
# Runtime dependencies
|
|
29
|
-
spec.add_dependency
|
|
30
|
+
spec.add_dependency 'terminal-table', '~> 3.0'
|
|
30
31
|
|
|
31
32
|
# Development dependencies
|
|
32
|
-
spec.add_development_dependency
|
|
33
|
-
spec.add_development_dependency
|
|
34
|
-
spec.add_development_dependency
|
|
33
|
+
spec.add_development_dependency 'rake', '~> 13.0'
|
|
34
|
+
spec.add_development_dependency 'rspec', '~> 3.12'
|
|
35
|
+
spec.add_development_dependency 'rubocop', '~> 1.21'
|
|
35
36
|
end
|
|
36
|
-
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: rubion
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.3.
|
|
4
|
+
version: 0.3.12
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- bipashant
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2025-11-
|
|
11
|
+
date: 2025-11-15 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: terminal-table
|
|
@@ -93,6 +93,7 @@ metadata:
|
|
|
93
93
|
source_code_uri: https://github.com/bipashant/rubion
|
|
94
94
|
changelog_uri: https://github.com/bipashant/rubion/blob/main/CHANGELOG.md
|
|
95
95
|
bug_tracker_uri: https://github.com/bipashant/rubion/issues
|
|
96
|
+
rubygems_mfa_required: 'true'
|
|
96
97
|
post_install_message:
|
|
97
98
|
rdoc_options: []
|
|
98
99
|
require_paths:
|