bundler-audit

Spec sheet

Purpose

bundler-audit provides patch-level verification for Bundler projects.Read 5 Oct 2026 · github.com

License

The project is free software under GPL version 3 or later.Read 5 Oct 2026 · github.com

Founded

2013Read 28 Sep 2026 · github.com

Advisory database

The tool can update the ruby-advisory-db database and check a lockfile with or without updating it.Read 5 Oct 2026 · github.com

Advisory handling

It prints advisory information and allows users to ignore advisories that have been manually worked around.Read 5 Oct 2026 · github.com

Insecure sources

It checks for insecure gem sources using http:// and git://.Read 5 Oct 2026 · github.com

Installation and requirements

The project documents installation with gem install bundler-audit and lists Git, Ruby 2.0.0 or newer, RubyGems 1.8 or newer, Thor ~> 1.0, and Bundler 1.2.0 or newer as requirements.Read 5 Oct 2026 · github.com

Integration

Rake tasks are available for auditing a bundle and updating the vulnerability database.Read 5 Oct 2026 · github.com

Maintainer and support

The README identifies Hal Brodigan in its copyright notice and directs users to GitHub Issues; it does not state a support service.Read 5 Oct 2026 · github.com

Offline use

The project says it does not require a network connection to run.Read 5 Oct 2026 · github.com

Output and configuration

It supports JSON output and a per-project configuration file for ignored advisory IDs.Read 5 Oct 2026 · github.com

Release details

RubyGems lists version 0.9.3, published November 28, 2025, with MFA used for publishing.Read 5 Oct 2026 · rubygems.org

Vulnerable gems

It checks Gemfile.lock for vulnerable gem versions.Read 5 Oct 2026 · github.com

Plans and prices

Every bundler-audit plan and price →

Where Specifiction places it

• Ruby Static Analysis Tools#7 of 217.9
• Software Composition Analysis Software#24 of 657.9