Ruby Open-Source Supply-Chain Review
Ruby repository pattern findings, supply-chain review signals and scan coverage.
Report generated: 2026-11-14 17:29 UTC.
Primary repository language: Ruby. 81 successful scans; 81 with a score, positive coverage and complete version metadata. Mean values are grouped by version; individual scores below are review prompts, not confirmed package incidents.
| Language | Scanned repos | Repos scored | Mean index / 100 | Schema / engine / scoring |
|---|---|---|---|---|
| Ruby | 81 | 81 | 2.13 | 1.0.0 / 2.0.0 / heuristic-density-v1 |
Repository evidence
| Repository | Supply-chain index / 100 | Schema / engine / scoring | Lines scanned | Scan date |
|---|---|---|---|---|
| loomio/loomio | 20.28 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 482,596 | 2026-10-31 |
| capistrano/capistrano | 8.40 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 18,812 | 2026-10-31 |
| blackcandy-org/blackcandy | 7.28 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 22,482 | 2026-10-31 |
| basecamp/fizzy | 7.10 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 88,248 | 2026-10-31 |
| sketchplugins/plugin-directory | 7.06 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 7,515 | 2026-10-31 |
| spree/spree | 6.67 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 899,159 | 2026-10-31 |
| sj26/mailcatcher | 6.23 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 15,538 | 2026-10-31 |
| activeadmin/activeadmin | 5.89 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 42,414 | 2026-10-31 |
| heartcombo/devise | 5.48 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 19,090 | 2026-10-31 |
| teamcapybara/capybara | 5.35 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 38,612 | 2026-10-31 |
| Shopify/liquid | 4.95 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 22,653 | 2026-10-31 |
| basecamp/once-campfire | 4.95 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 25,591 | 2026-10-31 |
| docusealco/docuseal | 4.70 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 151,481 | 2026-10-31 |
| jruby/jruby | 4.40 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 1,131,299 | 2026-10-31 |
| we-promise/sure | 4.19 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 774,680 | 2026-10-31 |
| ubicloud/ubicloud | 4.08 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 270,077 | 2026-10-31 |
| antiwork/gumroad | 3.92 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 1,124,148 | 2026-10-31 |
| zammad/zammad | 3.88 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 1,125,687 | 2026-10-31 |
| rapid7/metasploit-framework | 3.59 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 2,109,518 | 2026-10-31 |
| solidusio/solidus | 3.51 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 244,782 | 2026-10-31 |
| lobsters/lobsters | 3.13 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 33,034 | 2026-10-31 |
| norman/friendly_id | 3.11 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 6,328 | 2026-10-31 |
| huginn/huginn | 2.60 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 64,425 | 2026-10-31 |
| fluent/fluentd | 2.49 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 123,047 | 2026-10-31 |
| hanami/hanami | 2.25 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 41,692 | 2026-10-31 |
Pattern signals are prompts for human review, not proof of AI authorship, security vulnerabilities, missing packages, measured review time or code quality. Selection, scan coverage and scoring versions limit comparisons.