Most of us have a routine for adding a gem: search for it, open its page on rubygems.org , glance at the download count and the number of days since the last release, then copy the Gemfile line. The whole process takes half a minute. But until now, rubygems.org did not tell you whether the version you were about to install had a known security issue.