Source code of gem releases

Issue #2 resolved
Pavel Lobashov created an issue

version 2.0.7 of net-ping was released today

But latest commit to repo (to any branch) was made in 2016 year (see https://bitbucket.org/chernesk/net-ping/commits/)

Since 2016 there was 6 releases.

I don’t think this is okay to release some gem without commiting it source code.

Is everything fine?

I think this may be some security threat and we need to manually check each version of gem with more than 8 million downloads?

Comments (4)

  1. Log in to comment