7 ms·

Is there any context on why? Is there some controversy regarding RubyGems.org I'm not aware of?

KingOfCoders 1y ago
As I understood it, to secure (their words) the supply chain, they took ownership of the code and repo (which others disputed as being owned by them) and kicked out users from Github. It is said the underlying cause is that devs push rv which is threatening RubyGems.
- mosselman 1y ago
  How is rv threatening rubygems? I am pretty excited about rv on first glance, I tried it and it was too beta when I did to work nicely, but definitely good to have a uv type tool for ruby.
  - KingOfCoders 1y ago
    "Yes, I agree. And some of the “admins” even announced publicly many days ago they were launching a competitor tool and were funding raising for it. I’d not trust the system to such “admin”." https://bsky.app/profile/rmfranca.bsky.social/post/3lz7alpobhc2x https://bsky.app/profile/rmfranca.bsky.social/post/3lz7alpob... See https://spinel.coop/ https://spinel.coop/ "Spinel develops rv, the next-generation Ruby version manager"
    - phoronixrly 1y ago
      This doesn't explain how rv is threatening rubygems in any way.
      - KingOfCoders 1y ago
        [flagged]
        phoronixrly 1y ago
        Oh, don't worry, I get what you and Rafael are trying to insinuate. I just want you to spell it out so that hopefully you see how stupid it sounds.
        KingOfCoders 1y ago
        [flagged]
      - x3n0ph3n3 1y ago
        They were using the name "rubygems" to fund-raise for not-"rubygems."
        phoronixrly 1y ago
        But how is this a conflict? Both are not-for-profit projects with the same goal? How can one even use the term 'competition' in this context? What if the Ruby community embraces a new and better package manager? This is, again, a net win for the Ruby community, and both projects strive for that?
        x3n0ph3n3 1y ago
        It doesn't really matter if it's a non-profit. How do you think your company would react if you started raising money using their name?
        phoronixrly 1y ago
        Is Rubygems a company? My mind cannot comprehend why are people conflating not-for-profit open-source projects with for-profit companies... If Rubygems was a company, they'd have a trademark, they'd have patents, they'd have lawyers to protect the money they were making from their brand and product. But we are speaking about not-for-profit open-source projects, not for for-profit corporations!
        dismalaf 1y ago
        Ruby Central is a company that manages rubygems.org and rubygems. The maintainers who were locked out were being paid by Ruby Central while fundraising for their startup creating a competitor. Doesn't it seem like a bit of a security risk to you?
        krainboltgreene 1y ago
        No. (Disclaimer I got paid to work on rubygems and have been doing this for 18 years)
wallmountedtv 1y ago
In short, a hostile takeover forced by Shopify through Ruby Central. It was sparked after Ruby Central chose to platform an extremist figure prominently for their last RailsConf against the wishes of the sponsors, losing them a lot of sponsorship money, as well as community support. https://joel.drapper.me/p/rubygems-takeover/ https://joel.drapper.me/p/rubygems-takeover/
- mnx 1y ago
  Might be worth noting the figure in question is the creator of Ruby on Rails.
  - phoronixrly 1y ago
    [flagged]
  - wahnfrieden 1y ago
    [flagged]
    - simianparrot 1y ago
      [flagged]
- JimDabell 1y ago
  > It was sparked after Ruby Central chose to platform an extremist figure prominently for their last RailsConf This is so incredibly one-sided that it misleads more than it informs. The person they are talking about is DHH. Inviting the creator of Rails to speak at RailsConf – a conference for Rails – is not the outlandish behaviour this comment makes it sound like.
  - IshKebab 1y ago
    [flagged]
    - 1y ago
pil0u 1y ago
This article was the most nuanced I found while everything was still hot. https://archive.ph/SEzoV https://archive.ph/SEzoV
- splittydev 1y ago
  [flagged]
  - phplovesong 1y ago
    Afaik rubygems kicked some long term contributors and stole the entire project. Thats some serious red flags for me. At what point rubyruby gems does something nasty is only a matter of time. They could start to gatekeep or even worse add some sort of paid version. Anyway.. a core piece of infra like this needs to be open for anyone and not closed for some shady entrerprize.
    - byroot 1y ago
      That's a particularly one sided account of the events. Ruby Central wanted to oust one or two specific maintainers because of a rocky relationship (whether it was warranted or not is not my point). It later backfired when a majority of the other maintainers resigned. > They could start to gatekeep or even worse add some sort of paid version. That's a funny accusation given that's something the ousted maintainers now behind gem.coop wanted to do a while ago.

As I understood it, to secure (their words) the supply chain, they took ownership of the code and repo (which others disputed as being owned by them) and kicked out users from Github. It is said the underlying cause is that devs push rv which is threatening RubyGems.

mosselman 1y ago
How is rv threatening rubygems? I am pretty excited about rv on first glance, I tried it and it was too beta when I did to work nicely, but definitely good to have a uv type tool for ruby.
- KingOfCoders 1y ago
  "Yes, I agree. And some of the “admins” even announced publicly many days ago they were launching a competitor tool and were funding raising for it. I’d not trust the system to such “admin”." https://bsky.app/profile/rmfranca.bsky.social/post/3lz7alpobhc2x https://bsky.app/profile/rmfranca.bsky.social/post/3lz7alpob... See https://spinel.coop/ https://spinel.coop/ "Spinel develops rv, the next-generation Ruby version manager"
  - phoronixrly 1y ago
    This doesn't explain how rv is threatening rubygems in any way.
    - KingOfCoders 1y ago
      [flagged]
      - phoronixrly 1y ago
        Oh, don't worry, I get what you and Rafael are trying to insinuate. I just want you to spell it out so that hopefully you see how stupid it sounds.
        KingOfCoders 1y ago
        [flagged]
    - x3n0ph3n3 1y ago
      They were using the name "rubygems" to fund-raise for not-"rubygems."
      - phoronixrly 1y ago
        But how is this a conflict? Both are not-for-profit projects with the same goal? How can one even use the term 'competition' in this context? What if the Ruby community embraces a new and better package manager? This is, again, a net win for the Ruby community, and both projects strive for that?
        x3n0ph3n3 1y ago
        It doesn't really matter if it's a non-profit. How do you think your company would react if you started raising money using their name?
        phoronixrly 1y ago
        Is Rubygems a company? My mind cannot comprehend why are people conflating not-for-profit open-source projects with for-profit companies... If Rubygems was a company, they'd have a trademark, they'd have patents, they'd have lawyers to protect the money they were making from their brand and product. But we are speaking about not-for-profit open-source projects, not for for-profit corporations!
        dismalaf 1y ago
        Ruby Central is a company that manages rubygems.org and rubygems. The maintainers who were locked out were being paid by Ruby Central while fundraising for their startup creating a competitor. Doesn't it seem like a bit of a security risk to you?
        krainboltgreene 1y ago
        No. (Disclaimer I got paid to work on rubygems and have been doing this for 18 years)

wallmountedtv 1y ago

In short, a hostile takeover forced by Shopify through Ruby Central. It was sparked after Ruby Central chose to platform an extremist figure prominently for their last RailsConf against the wishes of the sponsors, losing them a lot of sponsorship money, as well as community support. https://joel.drapper.me/p/rubygems-takeover/ https://joel.drapper.me/p/rubygems-takeover/

mnx 1y ago
Might be worth noting the figure in question is the creator of Ruby on Rails.
- phoronixrly 1y ago
  [flagged]
- wahnfrieden 1y ago
  [flagged]
  - simianparrot 1y ago
    [flagged]
JimDabell 1y ago
> It was sparked after Ruby Central chose to platform an extremist figure prominently for their last RailsConf This is so incredibly one-sided that it misleads more than it informs. The person they are talking about is DHH. Inviting the creator of Rails to speak at RailsConf – a conference for Rails – is not the outlandish behaviour this comment makes it sound like.
- IshKebab 1y ago
  [flagged]
  - 1y ago

pil0u 1y ago

This article was the most nuanced I found while everything was still hot. https://archive.ph/SEzoV https://archive.ph/SEzoV

splittydev 1y ago
[flagged]
- phplovesong 1y ago
  Afaik rubygems kicked some long term contributors and stole the entire project. Thats some serious red flags for me. At what point rubyruby gems does something nasty is only a matter of time. They could start to gatekeep or even worse add some sort of paid version. Anyway.. a core piece of infra like this needs to be open for anyone and not closed for some shady entrerprize.
  - byroot 1y ago
    That's a particularly one sided account of the events. Ruby Central wanted to oust one or two specific maintainers because of a rocky relationship (whether it was warranted or not is not my point). It later backfired when a majority of the other maintainers resigned. > They could start to gatekeep or even worse add some sort of paid version. That's a funny accusation given that's something the ousted maintainers now behind gem.coop wanted to do a while ago.