# vile-bundler-audit

> Audit your Gemfile for known vulernabilities and insecure sources.

Latest version **0.3.6** (published 2018-02-28) · MPL-2.0 license · 0 weekly downloads

## Install

```sh
npm install vile-bundler-audit
pnpm add vile-bundler-audit
yarn add vile-bundler-audit
bun add vile-bundler-audit
```

## Health

**Score 15/100 (F)** — status: abandoned.

Positive: no vulnerabilities.

Warnings: low downloads; no types; no esm support; pre 1.0.

Negative: abandoned; low maintenance score.

## Facts

| | |
|---|---|
| Version | 0.3.6 |
| Published | 2018-02-28 |
| First published | 2017-05-02 |
| Weekly downloads | 0 |
| License | MPL-2.0 |
| TypeScript types | none |
| Module format | CommonJS |
| Dependencies | 2 |
| Unpacked size | 25.7 KB |
| Known vulnerabilities | 0 |
| Install scripts | no |
| Author | Brent Lintner |
| Maintainers | brentlintner |
| Keywords | vile, bundle, bundler, bundle-audit, gem, ruby |

## Links

- npm: https://www.npmjs.com/package/vile-bundler-audit
- Repository: https://github.com/forthright/vile-bundler-audit
- Issues: https://github.com/forthright/vile-bundler-audit/issues
- npm.io page: https://npm.io/package/vile-bundler-audit

## Dependencies (2)

- [lodash](https://npm.io/package/lodash.md) ^4.17.4
- [bluebird](https://npm.io/package/bluebird.md) ^3.5.0

## Alternatives

- [raw-loader](https://npm.io/package/raw-loader.md) — 4.3M weekly downloads
- [plop](https://npm.io/package/plop.md) — 1.4M weekly downloads
- [webpack-deadcode-plugin](https://npm.io/package/webpack-deadcode-plugin.md) — 80.3K weekly downloads
- [@storybook/preact-vite](https://npm.io/package/@storybook/preact-vite.md) — 54.2K weekly downloads
- [vite-plugin-transform](https://npm.io/package/vite-plugin-transform.md) — 2.4K weekly downloads

## Recent versions

- 0.3.6 (latest) — 2018-02-28
- 0.3.5 — 2017-07-21
- 0.3.4 — 2017-05-02

## README

# vile-bundler-audit [![Circle CI](https://circleci.com/gh/forthright/vile-bundler-audit.svg?style=shield&circle-token=3b75ecc1b75f4ec0dfe397388cf40f3594c2944b)](https://circleci.com/gh/forthright/vile-bundler-audit) [![score-badge](https://vile.io/api/v0/projects/vile-bundler-audit/badges/score?token=USryyHar5xQs7cBjNUdZ)](https://vile.io/~brentlintner/vile-bundler-audit) [![coverage-badge](https://vile.io/api/v0/projects/vile-bundler-audit/badges/coverage?token=USryyHar5xQs7cBjNUdZ)](https://vile.io/~brentlintner/vile-bundler-audit) [![dependency-badge](https://vile.io/api/v0/projects/vile-bundler-audit/badges/dependency?token=USryyHar5xQs7cBjNUdZ)](https://vile.io/~brentlintner/vile-bundler-audit)

A [Vile](http://github.com/brentlintner/vile) plugin for auditing your Gemfile for
known vulnerabilities and insecure sources (via [bundler-audit](https://github.com/rubysec/bundler-audit)).

## Requirements

- [Node.js](http://nodejs.org)
- [Ruby](http://ruby-lang.org)

## Installation

Currently, you need to have `bundler-audit` installed manually.

Example:

    npm i vile-bundler-audit
    gem install bundler-audit

## Usage

    vile a -p bundler-audit

## Config

```yaml
bundler-audit:
  config:
    update_db: true # defaults to false
    ignore_advisories: [ ".." ]
```

## Versioning

This project uses [Semver](http://semver.org).

## Licensing

This project is licensed under the [MPL-2.0](LICENSE) license.

Any contributions made to this project are made under the current license.

## Contributions

Current list of [Contributors](https://github.com/forthright/vile-bundler-audit/graphs/contributors).

Any contributions are welcome and appreciated!

All you need to do is submit a [Pull Request](https://github.com/forthright/vile-bundler-audit/pulls).

1. Please consider tests and code quality before submitting.
2. Please try to keep commits clean, atomic and well explained (for others).

### Issues

Current issue tracker is on [GitHub](https://github.com/forthright/vile-bundler-audit/issues).

Even if you are uncomfortable with code, an issue or question is welcome.

### Code Of Conduct

By participating in this project you agree to our [Code of Conduct](CODE_OF_CONDUCT.md).

### Maintainers

- Brent Lintner - [@brentlintner](http://github.com/brentlintner)

## Architecture

This project is currently written in Ruby and JavaScript.

- `bin` houses any shell based scripts
- `src` is es6+ syntax compiled with [Babel](https://babeljs.io)
- `lib` generated js library
- `lib_ruby` ruby shim code

## Developing

    cd vile-bundler-audit
    npm install
    gem install rspec
    npm run dev
    npm test-all

---
_Source: https://npm.io/package/vile-bundler-audit · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._