
Security News
CISA’s 2025 SBOM Guidance Adds Hashes, Licenses, Tool Metadata, and Context
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Gemlens is a CLI tool to analyze the evolution of your Gemfile
over time. It helps you track when gems were added, removed, or updated in a project — great for audits, debugging, or historical exploration.
Add this line to your application's Gemfile:
gem 'gemlens'
Then execute:
$ bundle install
Or install it globally:
$ gem install gemlens
From any Git-tracked Ruby project:
$ bundle exec gemlens
You’ll get a timeline showing how your Gemfile
has changed, for example:
📜 Gemfile History Timeline
🟩 2023-04-11 Added pry by Jane Doe ➜ PR #1234 | Add pry for debugging
🟥 2023-05-09 Removed byebug by Jane Doe ➜ 4d3c1f0 | Remove unused gem
🟦 2023-06-12 Updated rails (6.1.0 → 7.0.4) by John Smith ➜ PR #2345 | Upgrade Rails
You can also pass a path to another repo:
$ bundle exec gemlens /path/to/another/repo
To set up the project locally:
$ git clone https://github.com/BestBitsLab/gemlens.git
$ cd gemlens
$ bin/setup
You can experiment with the code via:
$ bin/console
To build and install the gem locally:
$ bundle exec rake install
To release a new version:
lib/gemlens/version.rb
$ bundle exec rake release
This will tag, push, and publish to RubyGems.org.
Bug reports and pull requests are welcome on GitHub. This project is intended to be a safe, welcoming space for collaboration. Please read and follow the code of conduct.
This gem is available as open source under the terms of the MIT License.
Everyone interacting in the Gemlens project’s codebase, issue trackers, and other community spaces is expected to follow the Code of Conduct.
FAQs
Unknown package
We found that gemlens demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.
Security News
ESLint now supports parallel linting with a new --concurrency flag, delivering major speed gains and closing a 10-year-old feature request.