Dear Rubyists,
Thank you for giving me this opportunity to share with you. We take our stewardship of the Ruby Gems ecosystem seriously. Our mission is clear: keep the language and the infrastructure you rely on stable, safe, and trustworthy. Before we get to what the next steps will be, here is a quick recap from the video that we shared last week.
Moving parts:
We recognize there is confusion between some of the moving parts in this conversation, and we would like to add some clarity around that.
The rubygems client and bundler source code both live in the rubygems/rubygems Github monorepo
Similarly, the source code for the rubygems.org service lives in the rubygems/rubygems.org Github repo
service lives in the rubygems/rubygems.org Github repo Lastly, the production rubygems.org service is run on AWS servers by Ruby Central operators.
service is run on AWS servers by Ruby Central operators. These components are distinct but related, and work together to provide gems from developers to end-users. Ruby Central’s role is to ensure the whole platform runs securely and reliably end-to-end, from gem publishing to gem hosting and, eventually, to gem installation on end-user machines.
The rubygems repository README and the rubygems.org repository README both explicitly state that they are “managed by Ruby Central”
Where we are
... continue reading