Tech riderRev. 5 Oct 2026

bundler-audit

Ch 505.7of 65 Software Composition Analysis Software

1Runs onLinux, Mac
2CostsFree plan
3Supported ecosystemsRuby gems and Bundler
4Deployment optionsself hosted

4 lines stated Written from the maker's own pages: github.com

Visit site Alternatives

Overview

bundler-audit is ranked #50 of 65 in software composition analysis software on Specifiction. It runs on Linux, macOS. There is a free plan.

bundler-audit plans and pricing

All plans

bundler-audit Free GPL-3.0-or-later · Ruby gem github.com · 5 Oct 2026

Compared on software composition analysis software

Supported ecosystems: Ruby gems and Bundlergithub.com
Deployment options: self_hostedgithub.com

Facts

Purpose: bundler-audit provides patch-level verification for Bundler projects.github.com · 5 Oct 2026
Vulnerable gems: It checks Gemfile.lock for vulnerable gem versions.github.com · 5 Oct 2026
Insecure sources: It checks for insecure gem sources using http:// and git://.github.com · 5 Oct 2026
Advisory handling: It prints advisory information and allows users to ignore advisories that have been manually worked around.github.com · 5 Oct 2026
Offline use: The project says it does not require a network connection to run.github.com · 5 Oct 2026
Advisory database: The tool can update the ruby-advisory-db database and check a lockfile with or without updating it.github.com · 5 Oct 2026
Integration: Rake tasks are available for auditing a bundle and updating the vulnerability database.github.com · 5 Oct 2026
Output and configuration: It supports JSON output and a per-project configuration file for ignored advisory IDs.github.com · 5 Oct 2026
Installation and requirements: The project documents installation with gem install bundler-audit and lists Git, Ruby 2.0.0 or newer, RubyGems 1.8 or newer, Thor ~> 1.0, and Bundler 1.2.0 or newer as requirements.github.com · 5 Oct 2026
License: The project is free software under GPL version 3 or later.github.com · 5 Oct 2026
Maintainer and support: The README identifies Hal Brodigan in its copyright notice and directs users to GitHub Issues; it does not state a support service.github.com · 5 Oct 2026
Release details: RubyGems lists version 0.9.3, published November 28, 2025, with MFA used for publishing.rubygems.org · 5 Oct 2026