Supply Chain Risk: Preparing for a Gem Disappearing Overnight (prawn_plus)

The Atlanta Ruby Meetup is our monthly ONLINE main event.

At work, we had a client still using the prawn_plus gem to render PDFs in a Rails application using traditional Rails views. After working cleanly for a decade, no published CVES, no fan fare, the author/maintainer chose to unpublished it everywhere, delete their GitHub, and with that all the forks vanished as well.

In this presentation, Frank is going to talk about this supply chain risk. How it is similar to the leftpad incident in the NPM ecosystem, and a few tricks to prepare for it.

He will also talk about resurrecting a gem from a local cached copy when you really need to keep it available when the original has up and vanished.

Schedule:

6:30pm - 7:00pm: Connect to the Google Meet and chat with other Rubyists
7:00pm - 7:45 pm: Presentation
7:45pm - 8pm: Time for questions and chit chat

Interested in Speaking? Want to show off your Ruby project or Ruby-related technology? Want to suggest a topic? Let us know!