Cross-ecosystem dependency maintenance auditor: flags unmaintained, archived, stale, and below-the-fix deps across the full transitive graph. Ruby gems natively; npm/pypi/cargo/go/maven/nuget via CycloneDX SBOM. Signals: activity, OpenSSF Scorecard, OSV advisories, libyear, poison-pill, runtime-ceiling. Outputs SARIF/JSON/CycloneDX with CI gates.
ruby rubygems bundler devops security-audit ci-cd sarif outdated-dependencies vulnerability-scanner dependency-checker sbom cyclonedx supply-chain-security libyear openssf-scorecard dependency-health gem-maintenance
-
Updated
Sep 25, 2026 - Ruby