bundler-audit

Runs on Linux, Mac.

bundler-audit is ranked #16 of 65 in software composition analysis software on The Geeks Club. It runs on Linux, macOS. There is a free plan.

bundler-audit plans and pricing

bundler-audit Free GPL-3.0-or-later · Ruby gem github.com · 5 Oct 2026

Sonatype Nexus Repository 0 of 4 in the starter kit Lesson 18.0 Xygeni 0 of 4 in the starter kit Lesson 27.9 FOSSA 0 of 4 in the starter kit Lesson 37.7 Snyk Open Source 0 of 4 in the starter kit Lesson 47.4 Docker Desktop 0 of 4 in the starter kit Lesson 57.3 Socket 0 of 4 in the starter kit Lesson 67.3

Purpose: bundler-audit provides patch-level verification for Bundler projects.
Vulnerable gems: It checks Gemfile.lock for vulnerable gem versions.
Insecure sources: It checks for insecure gem sources using http:// and git://.
Advisory handling: It prints advisory information and allows users to ignore advisories that have been manually worked around.
Offline use: The project says it does not require a network connection to run.
Advisory database: The tool can update the ruby-advisory-db database and check a lockfile with or without updating it.
Integration: Rake tasks are available for auditing a bundle and updating the vulnerability database.
Output and configuration: It supports JSON output and a per-project configuration file for ignored advisory IDs.
Installation and requirements: The project documents installation with gem install bundler-audit and lists Git, Ruby 2.0.0 or newer, RubyGems 1.8 or newer, Thor ~> 1.0, and Bundler 1.2.0 or newer as requirements.
License: The project is free software under GPL version 3 or later.
Maintainer and support: The README identifies Hal Brodigan in its copyright notice and directs users to GitHub Issues; it does not state a support service.
Release details: RubyGems lists version 0.9.3, published November 28, 2025, with MFA used for publishing.
Founded: 2013
Price from: Free

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.