Audit your Gemfile for dependency health across the full transitive graph: maintenance activity, archived repos, outdated versions, OpenSSF scores, vulnerabilities, libyear drift. Outputs terminal, JSON, markdown, SARIF, and CycloneDX, with CI quality gates and granular .still_active.yml suppression.
ruby rubygems bundler devops security-audit ci-cd sarif outdated-dependencies vulnerability-scanner dependency-checker sbom cyclonedx supply-chain-security libyear openssf-scorecard dependency-health gem-maintenance
-
Updated
Jun 15, 2026 - Ruby