bundler-audit
The facts below are what the maker publishes about bundler-audit, checked and dated. Our editors have not written about it yet.
Plans and prices
From bundler-audit's own pricing page, checked 5 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| bundler-audit | Free | GPL-3.0-or-later · Ruby gem |
The facts
Each one read from bundler-audit's own pages, with the date it was checked.
What it does
- Advisory database
- The tool can update the ruby-advisory-db database and check a lockfile with or without updating it.checked 5 Oct 2026
- Advisory handling
- It prints advisory information and allows users to ignore advisories that have been manually worked around.checked 5 Oct 2026
- Insecure sources
- It checks for insecure gem sources using http:// and git://.checked 5 Oct 2026
- Installation and requirements
- The project documents installation with gem install bundler-audit and lists Git, Ruby 2.0.0 or newer, RubyGems 1.8 or newer, Thor ~> 1.0, and Bundler 1.2.0 or newer as requirements.checked 5 Oct 2026
- Integration
- Rake tasks are available for auditing a bundle and updating the vulnerability database.checked 5 Oct 2026
- License
- The project is free software under GPL version 3 or later.checked 5 Oct 2026
- Maintainer and support
- The README identifies Hal Brodigan in its copyright notice and directs users to GitHub Issues; it does not state a support service.checked 5 Oct 2026
- Offline use
- The project says it does not require a network connection to run.checked 5 Oct 2026
- Output and configuration
- It supports JSON output and a per-project configuration file for ignored advisory IDs.checked 5 Oct 2026
- Purpose
- bundler-audit provides patch-level verification for Bundler projects.checked 5 Oct 2026
- Release details
- RubyGems lists version 0.9.3, published November 28, 2025, with MFA used for publishing.checked 5 Oct 2026
- Vulnerable gems
- It checks Gemfile.lock for vulnerable gem versions.checked 5 Oct 2026
The company
- Founded
- 2013checked 28 Sep 2026
Alternatives to bundler-audit
- 1

DeepSource
Free planWebAPILinuxmacOS8.0From $30 a month - 2

GitHub CodeQL
Free planWebExtensionLinuxmacOS7.5From $30 a month - 3

Qlty Cloud
Free planWebAPIExtensionLinux7.2From $20 a month - 4

Codacy
Free planWebExtension7.0From $18 a year - 5

Semgrep Supply Chain
Free planWebAPILinuxmacOS7.0From $30 a month - 6
Reek
Free planLinux6.2Free plan
