
Product
Announcing Socket Certified Patches: One-Click Fixes for Vulnerable Dependencies
A safer, faster way to eliminate vulnerabilities without updating dependencies
underwear
Advanced tools
NOTE: Underwear is under heavy and frequent development and is not recommeded for use yet.
Underwear is based on Suspenders, the base Rails application used at thoughtbot.
First install the underwear gem:
gem install underwear
Then run:
underwear projectname
This will create a Rails app in projectname using the latest version of Rails.
Note: This will also create Heroku staging and production apps using the name you provide, so make it unique.
To see the latest and greatest gems, look at Underwear' Gemfile, which will be appended to the default generated projectname/Gemfile.
It includes application gems like:
And development gems like:
And testing gems like:
TODO
Underwear also comes with:
./bin/setup convention for new developer setup./bin/deploy convention for deploying to HerokuRack::Deflater to compress responses with GzipSECRET_KEY_BASE environment variable in all
environmentsYou can optionally create Heroku staging and production apps:
underwear app --heroku true
This:
staging and production Git remotesRACK_ENV and RAILS_ENV environment variables set
to stagingYou can optionally specify alternate Heroku flags:
underwear app \
--heroku true \
--heroku-flags "--region eu --addons newrelic,sendgrid,ssl"
See all possible Heroku flags:
heroku help create
This will initialize a new git repository for your Rails app. You can
bypass this with the --skip-git option:
underwear app --skip-git true
You can optionally create a GitHub repository for the suspended Rails app. It requires that you have Hub on your system:
curl http://hub.github.com/standalone -sLo ~/bin/hub && chmod +x ~/bin/hub
underwear app --github organization/project
This has the same effect as running:
hub create organization/project
Underwear uses spring by default.
It makes Rails applications load faster, but it might introduce confusing issues
around stale code not being refreshed.
If you think your application is running old code, run spring stop.
And if you'd rather not use spring, add DISABLE_SPRING=1 to your login file.
Underwear requires the latest version of Ruby.
Some gems included in Underwear have native extensions. You should have GCC installed on your machine before generating an app with Underwear.
Use OS X GCC Installer for Snow Leopard (OS X 10.6).
Use Command Line Tools for XCode for Lion (OS X 10.7) or Mountain Lion (OS X 10.8).
We use Capybara Webkit for full-stack JavaScript integration testing. It requires QT. Instructions for installing QT are here.
PostgreSQL needs to be installed and running for the db:create rake task.
If you have problems, please create a GitHub Issue.
See CONTRIBUTING.md.
FAQs
Unknown package
We found that underwear demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
A safer, faster way to eliminate vulnerabilities without updating dependencies

Product
Reachability analysis for Ruby is now in beta, helping teams identify which vulnerabilities are truly exploitable in their applications.

Research
/Security News
Malicious npm packages use Adspect cloaking and fake CAPTCHAs to fingerprint visitors and redirect victims to crypto-themed scam sites.