
Security News
New Website “Is It Really FOSS?” Tracks Transparency in Open Source Distribution Models
A new site reviews software projects to reveal if they’re truly FOSS, making complex licensing and distribution models easy to understand.
The no-baloney fork of Mongoid. Made by the community, for the community. Mongoid is the Ruby Object Document Mapper (ODM) for MongoDB.
This fork of Mongoid is not endorsed by or affiliated with MongoDB Inc. 👍
Replace gem 'mongoid'
in your application's Gemfile with:
gem 'mongoid-ultra'
(Do not install mongoid
and mongoid-ultra
at the same time.)
Version support may differ from MongoDB's Mongoid release.
This is a community-driven fork of Mongoid, intend to improve the following over MongoDB's Mongoid:
This fork will merge in changes at least once-per-month from mongodb/mongoid as its "upstream" repo. We may backport PRs to upstream where it makes sense to do so, but cannot guarantee that the upstream will merge them.
Important: Mongoid Ultra is currently in alpha
state. The first full release will be 9.0.0.0
.
For the time being, version numbers will shadow those of mongodb/mongoid
with an additional "patch" number added:
X.Y.Z.P
Where X.Y.Z
is the latest upstream release version, and P
is the patch version of this repo.
P
will be reset to zero anytime the major version X
changes, but will not be reset when the minor or tiny Y
/Z
version changes.
We will also use -alpha
, -beta
, -rc
, etc. suffixes to denote pre-releases.
Semver: For the time being will follow the major version component of semver, i.e. not breaking or
removing functionality except in major (X
) releases. We may introduce new features in new patch (P
) releases,
and will use feature flags prefixed with ultra_
to allow users to opt-in.
All new versions will undergo battle-testing in production at TableCheck prior to being released.
and
and or
operators to a gem. Require usage of all_of
and any_of
instead.:field.in => [1, 2, 3]
query syntax to a gem. Require usage of field: { '$in' => [1, 2, 3] }
instead.field :type
declarations.belongs_to_one
, belongs_to_many
)The documentation of this fork will be hosted at: https://tablecheck.github.io/mongoid-ultra/ (not online yet!)
For beginners, please use MongoDB's existing Mongoid support resources:
Feature requests and bugs affecting both upstream and Mongoid Ultra should be reported in the MongoDB MONGOID Jira. Please also raise a Mongoid Ultra Github issue in this project to track the fix. We prefer if upstream can make the fix first then we merge it.
Issues specific to Mongoid Ultra should be raised in the Mongoid Ultra Github issue tracker
Security issues affecting both upstream and Mongoid Ultra should be reported to MongoDB.
Security issues affecting only Mongoid Ultra should be reported to security@tablecheck.com. The email should be encrypted with the following PGP public key:
0xDF7D22A0E8772326
466C 56B9 E110 3CBA 2129 DBAD DF7D 22A0 E877 2326
We appreciate your help to disclose security issues responsibly.
Mongoid Ultra is shepherded by the team at TableCheck. TableCheck have been avid Mongoid users since 2013, contributing over 150 PRs to Mongoid and MongoDB Ruby projects. TableCheck uses Mongoid to power millions of restaurant reservations each month, and are personally invested in the making the best user experience possible.
We invite experienced Mongoid hands in the community to apply for co-maintainership. Please raise a Mongoid Ultra Github issue if interested.
Mongoid started as an open-source project created by Durran Jordan in 2009. MongoDB Inc. took over maintainership in 2015. Since the transition, the hallmarks of user-disconnect and corporate fumbling have become apparent:
None of this is intended to disparage the hard-working and talented individuals at MongoDB Inc., but rather, to illustrate that the corporate rules, philosophy, and priorities of MongoDB Inc. are not aligned with the needs of its Ruby users.
It's time to do better! 💪 We hope this project encourages MongoDB Inc. to improve its own offering.
MongoDB, Mongo, and the leaf logo are registered trademarks of MongoDB, Inc. and are used in compliance with MongoDB Inc.'s Trademark Usage Guidelines. Any usage herein should not be construed as an endorsement or affiliation with this project.
FAQs
Unknown package
We found that mongoid-ultra demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A new site reviews software projects to reveal if they’re truly FOSS, making complex licensing and distribution models easy to understand.
Security News
Astral unveils pyx, a Python-native package registry in beta, designed to speed installs, enhance security, and integrate deeply with uv.
Security News
The Latio podcast explores how static and runtime reachability help teams prioritize exploitable vulnerabilities and streamline AppSec workflows.