Holly Womack on The Trail of Bits Bloghttps://miscreants.github.io/blog.trailofbits.com/authors/holly-womack/Recent content in Holly Womack on The Trail of Bits BlogHugoen-usWed, 11 Dec 2024 09:00:59 -0500Auditing the Ruby ecosystem's central package repositoryhttps://miscreants.github.io/blog.trailofbits.com/2024/12/11/auditing-the-ruby-ecosystems-central-package-repository/Wed, 11 Dec 2024 09:00:59 -0500https://miscreants.github.io/blog.trailofbits.com/2024/12/11/auditing-the-ruby-ecosystems-central-package-repository/Ruby Central hired Trail of Bits to complete a security assessment and a competitive analysis of RubyGems.org, the official package management system for Ruby applications. With over 184+ billion downloads to date, RubyGems.org is critical infrastructure for the Ruby language ecosystem.