| Port details |
- rubygem-bundler-audit Patch-level verification for Bundled apps
- 0.9.3 sysutils
=0 0.9.3Version of this port present on the latest quarterly branch. - Maintainer: ruby@FreeBSD.org
 - Port Added: 2026-03-11 05:48:04
- Last Update: 2026-03-11 05:44:28
- Commit Hash: 82d92b5
- Also Listed In: rubygems
- License: GPLv3+
- WWW:
- https://github.com/rubysec/bundler-audit
- Description:
- bundler-audit provides patch-level verification for Bundled Ruby applications.
It audits Ruby applications for known security vulnerabilities by checking
the application's Gemfile.lock against a database of known vulnerabilities.
The tool can identify:
- Gems with known security vulnerabilities
- Insecure gem sources (non-HTTPS)
- Outdated gem versions
bundler-audit is an essential security tool for Ruby developers and should
be run regularly as part of a security audit process to ensure applications
are not vulnerable to known security issues.
Key features:
- Checks Gemfile.lock for vulnerable gems
- Updates vulnerability database automatically
- Integration with CI/CD pipelines
- Command-line interface for easy automation
¦ ¦ ¦ ¦ 
- Manual pages:
- FreshPorts has no man page information for this port.
- pkg-plist: as obtained via:
make generate-plist - USE_RC_SUBR (Service Scripts)
- no SUBR information found for this port
- Dependency lines:
-
- rubygem-bundler-audit>0:sysutils/rubygem-bundler-audit
- To install the port:
- cd /usr/ports/sysutils/rubygem-bundler-audit/ && make install clean
- To add the package, run one of these commands:
- pkg install sysutils/rubygem-bundler-audit
- pkg install rubygem-bundler-audit
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: rubygem-bundler-audit
- Flavors: there is no flavor information for this port.
- distinfo:
- TIMESTAMP = 1773207355
SHA256 (rubygem/bundler-audit-0.9.3.gem) = 81c8766c71e47d0d28a0f98c7eed028539f21a6ea3cd8f685eb6f42333c9b4e9
SIZE (rubygem/bundler-audit-0.9.3.gem) = 50176
Packages (timestamps in pop-ups are UTC):
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Build dependencies:
-
- ruby33 : lang/ruby33
- gem : devel/ruby-gems
- Runtime dependencies:
-
- rubygem-bundler>=1.15.0 : sysutils/rubygem-bundler
- rubygem-thor>=1.0<2 : devel/rubygem-thor
- ruby33 : lang/ruby33
- gem : devel/ruby-gems
- Patch dependencies:
-
- ruby33 : lang/ruby33
- gem : devel/ruby-gems
-
- This port is required by:
- for Run
-
- sysutils/rubygem-bundle-audit
Configuration Options:
- No options to configure
- Options name:
- sysutils_rubygem-bundler-audit
- USES:
- gem
- FreshPorts was unable to extract/find any pkg message
- Master Sites:
|
Number of commits found: 1
| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
0.9.3 11 Mar 2026 05:44:28
    |
Xin LI (delphij)  |
sysutils/rubygem-bundler-audit: Add new port
bundler-audit provides patch-level verification for Bundled Ruby
applications by auditing Gemfile.lock against a database of known
vulnerabilities.
Also add rubygem-bundle-audit as a wrapper gem that depends on
rubygem-bundler-audit, for developers who reference "bundle-audit"
instead of "bundler-audit". |
Number of commits found: 1
|