RubyGems.org
RubyGems.org is a community-run hosting service for finding, installing, and publishing RubyGems.
What RubyGems.org is
RubyGems.org is a community-run hosting service for finding, installing, and publishing RubyGems. Its HTTP API supports gem searches and publishing, version and download lookups, owner management, profiles, webhooks, and site activity. New gems are usually ready to install within seconds of publication. The service supports Bundler workflows involving Rails, Sinatra, Docker, and CI. Trusted Publishing lets configured CI workflows publish gems with short-lived tokens rather than long-lived API tokens. RubyGems.org recommends multi-factor authentication with WebAuthn or one-time passwords, and gem owners can require MFA. API keys can be restricted to specific actions. Weekly PostgreSQL data dumps are available with user information removed. The service documents rate limits for the site and API, and directs account or publishing questions to its support email. Its code is available on GitHub under the MIT license. Ruby Central oversees the service, which relies on supporters, sponsorships, memberships, and infrastructure donors for funding. It began in April 2009, started by Nick Quaranto, and is free with no free trial.
Good
- Free service for finding, installing, and publishing gems
- HTTP API covers publishing and gem lookups
- Trusted Publishing uses short-lived tokens
- API keys can be restricted by action
- Weekly data dumps omit user information
Watch out
- Service and API have documented rate limits
- No free trial is offered
- Private packages are not supported
Who it suits
RubyGems.org suits Ruby developers and gem authors who need to discover, install, or publish packages. Its API and CI publishing options are relevant to teams integrating gem workflows into development processes.
Verdict
RubyGems.org combines package discovery and hosting with API access and CI publishing options, at no charge. Developers should account for its documented rate limits and the absence of private packages.
The facts
Each one read from RubyGems.org's own pages, with the date it was checked.
What it does
- Account security
- RubyGems.org recommends multi-factor authentication using WebAuthn or one-time passwords, for both web and API account activity.checked 4 Oct 2026
- API
- The HTTP API supports gem queries and publishing, version and download lookups, owner management, profiles, webhooks, and site activity.checked 3 Oct 2026
- API key security
- API keys can be scoped to specific actions, and RubyGems.org says keys are stored in its database after one-way encryption.checked 3 Oct 2026
- Audience
- The service is aimed at Ruby developers and gem authors who need to discover, install, or publish Ruby packages.checked 4 Oct 2026
- Community funding
- RubyGems.org is a community-run service overseen by Ruby Central and relies on supporters, sponsorships, memberships, and infrastructure donors for funding.checked 3 Oct 2026
- Data access
- RubyGems.org provides weekly PostgreSQL data dumps with user information removed.checked 3 Oct 2026
- Dependency security
- Bundler can record and verify gem checksums in lockfiles and can exclude recently released versions through cooldown settings.checked 4 Oct 2026
- Discovery
- The site lets users find, install, and publish RubyGems.checked 4 Oct 2026
- Hosting and delivery
- The site says its infrastructure is hosted on AWS, gems are hosted on Amazon S3 and served by Fastly, and new gems are usually ready to install within seconds of publishing.checked 3 Oct 2026
- Infrastructure
- RubyGems.org says its infrastructure is hosted on AWS, gems are hosted on Amazon S3, and served by Fastly.checked 4 Oct 2026
- Installation
- RubyGems can be updated from the command line with `gem update --system`, and manual installation is also documented.checked 4 Oct 2026
- Integrations
- The guides document Bundler use with Rails, Sinatra, Docker, and continuous integration systems including GitHub Actions and GitLab CI.checked 4 Oct 2026
- Open source
- The RubyGems.org code is available on GitHub under the MIT license.checked 4 Oct 2026
- Project goals
- The project aims to provide a better API for gems, make project pages more transparent and accessible, and let the community improve the site.checked 4 Oct 2026
- Publishing speed
- The time between publishing a new gem and having it ready for installation is usually a few seconds.checked 4 Oct 2026
- Purpose
- RubyGems.org is the Ruby community's gem hosting service.checked 4 Oct 2026
- Rate limits
- RubyGems.org documents rate limits for its service and API.checked 4 Oct 2026
- Security reporting
- Security issues in RubyGems, Bundler, or RubyGems.org can be reported to [email protected] or through HackerOne; the service says it no longer offers monetary bug bounty rewards.checked 4 Oct 2026
- Started
- The project was started in April 2009 by Nick Quaranto.checked 3 Oct 2026
- Support
- For trouble pushing a gem or help with a RubyGems.org account, the site directs users to [email protected].checked 4 Oct 2026
- Trusted publishing
- Trusted Publishing uses GitHub Actions and OpenID Connect to publish gems with short-lived tokens instead of long-lived API tokens.checked 4 Oct 2026
- Trusted Publishing
- Trusted Publishing lets a configured CI workflow publish gems using short-lived tokens instead of long-lived API tokens.checked 3 Oct 2026
The company
- Founded
- 2009checked 28 Sep 2026
Money
- Free plan
- Yeschecked 20 Sep 2026
