No description provided.
Run bundle-audit against your ruby codebase.
Verdaccio Middleware plugin to bypass npmjs audit
Audits NPM, Yarn, and PNPM projects in CI environments
OpenPGP.js is a Javascript implementation of the OpenPGP protocol. This is defined in RFC 4880.
Given a response from the npm security api, render it into a variety of security reports
Get bundle name from a bundle identifier (macOS): `com.apple.Safari` → `Safari`
Aids humans and automation in managing npm audit results
Generate an HTML report for CODEOWNERS ownership gaps and run in CI or from the CLI to fail when files are not covered.
Reshape into a better npm audit for the community and encourage more people to include security audit into their process.
Core modules for audit-resolve.json file and logic of its processing
The missing `yarn audit fix`
Provides audit logging functionalities for Node.js applications
Webpack plugin and CLI utility that represents bundle content as convenient interactive zoomable treemap
A wrapper around yarn audit that fixes many issues
ECMAScript code generator
bundle and require a file
Portable hybrid code-auditing framework for arbitrary repositories.
Descope audit management widget
Sigstore bundle type
A tool for working with CODEOWNERS files
OCI NodeJS client for Audit Service
Reshape into a better npm audit for the community and encourage more people to include security audit into their process.
Simple, pluggable, zero-dependency, GraphQL over HTTP spec compliant server, client and audit suite.
Just requires bundler-audit, if you've mistakenly required bundle-audit
Audit a project's gem dependencies before deployment
bundler-audit provides patch-level verification for Bundled apps.
An improved version of bundler-audit provides patch-level verification for Bundled apps
bundler-audit provides patch-level verification for Bundled apps.
`rails dep:upgrade` runs `bundle update`, `bundle audit`, `yarn upgrade` to update your app dependencies, then generates a markdown summary for your pull/merge request.
bundler-budit is a fork of bundler-audit, which provides patch-level verification for Bundled apps.
bundle-patch is a CLI tool that detects vulnerable gems in your Gemfile and automatically upgrades them to a patchable version based on your configured strategy (patch/minor/all). Uses bundler-audit under the hood.
pikuri-core is the lean, audit-friendly foundation of the pikuri family: Pikuri::Agent (a thin wrapper around ruby_llm's chat loop) with its Configurator + Extension protocol, the strict Pikuri::Tool framework, a listener surface for rendering / budgets / sub-agents, and four bundled stateless tools (calculator, web search, web scrape, fetch). Extensions (skills, MCP, workspace, coding stack, named-agent personas) live in sibling gems so a privacy-conscious user can install just this core and audit a minimal dependency tree. For the convenience bundle that pulls in everything, see the +pikuri+ metagem.
Analyses your Gemfile for dependency health: checks if gems are actively maintained (last commit dates via GitHub and GitLab, release dates), outdated versions, archived repos, OpenSSF Scorecard security scores, known vulnerabilities via deps.dev, and libyear drift. Ruby version freshness with EOL detection. Handles rubygems, git, path, and GitHub Packages sources. Outputs coloured terminal tables, markdown, or JSON. CI quality gates with --fail-if-critical, --fail-if-warning, --fail-if-vulnerable, --fail-if-outdated, and --ignore. A comprehensive alternative to running bundle outdated, bundler-audit, and libyear-bundler separately.
rails-cto bundles the quality toolchain (RuboCop, Reek, Flog, Flay, Brakeman, bundler-audit, SimpleCov, Herb) that the rails-cto Claude plugin expects, and ships matching configuration templates you can drop into any Rails app with `rails-cto init`. It also provides a custom RuboCop cop that enforces the Minitest::Spec `subject` convention used by the plugin's skills.
+pikuri+ is the convenience bundle for the pikuri AI-assistant toolkit. It ships no Ruby code of its own beyond a tiny entry file that +require+'s each sibling gem; +gem install pikuri+ pulls in pikuri-core, pikuri-skills, pikuri-tasks, pikuri-memory, pikuri-workspace, pikuri-code, pikuri-mcp, pikuri-subagents, pikuri-vectordb, and pikuri-assistant in one shot, and +require 'pikuri'+ boots all of them. Privacy-conscious users who want a minimal dependency tree to audit should install +pikuri-core+ directly and opt into the extension gems they actually need — same +bundle add+ pattern Rails users have always had. See each pikuri-* gem's README for its individual surface.