RubyGems
Search documents
Rails 创始人遭社区逼宫,金主立马撑腰,核心维护者被“血洗”出局,10 年了,DHH 还是 Ruby 社区的最大问题?
3 6 Ke· 2025-09-26 10:10
Core Viewpoint - The Ruby community is experiencing significant turmoil due to a controversial takeover of RubyGems, driven by Shopify's influence and the actions of David Heinemeier Hansson (DHH), which has led to a split between community members and corporate interests [1][20][25]. Group 1: RubyGems Takeover - RubyGems, the standard package manager for Ruby, has undergone a hostile takeover, with key maintainers removed and control shifted to Ruby Central under Shopify's pressure [2][6]. - An anonymous maintainer renamed the RubyGems GitHub organization to Ruby Central and added a new maintainer while removing all other maintainers without explanation [2][3]. - Despite some changes being rolled back, the new maintainer retained ownership, and by September 18, all previous maintainers were removed from their roles [3][6]. Group 2: Community Response - The Ruby community is calling for a separation from DHH, with some developers advocating for a hard fork of Rails and Ruby projects to establish new governance and behavior standards [10][16]. - DHH's controversial statements and actions have led to a perception that he is a significant problem within the Ruby community, prompting calls for new leadership [11][15][25]. - A public letter titled "Plan Vert" has been initiated by developers, demanding a break from DHH's influence and a reformation of community governance [16][26]. Group 3: Financial Implications - Ruby Central has historically relied on corporate sponsorship, and the loss of a $250,000 annual sponsorship from Sidekiq due to dissatisfaction with DHH has exacerbated financial pressures [4][8]. - Shopify's demand for complete control over RubyGems and key Gems was accompanied by threats to withdraw financial support, highlighting the financial leverage exerted over Ruby Central [6][20]. Group 4: Governance and Security - Ruby Central has stated that the changes are necessary for ensuring the security of the Ruby supply chain, emphasizing the need for improved governance and access control [20][24]. - The organization plans to formalize operator agreements and restrict management access to only employed or contracted engineers, aiming to enhance security protocols [20][24].
开源项目遭“夺权”,原核心维护者全被踢出局后怒批:这是一次恶意接管
3 6 Ke· 2025-09-25 07:36
Core Points - The recent controversy in the Ruby community revolves around the management of the RubyGems and Bundler projects, with accusations of a "hostile takeover" by Ruby Central, the non-profit organization overseeing these tools [1][11][12] - Long-time maintainers, including Ellen Dash, have expressed their outrage over being removed from their roles without prior notice or explanation, leading to significant community backlash [5][10][14] - Ruby Central's justification for these actions is centered on enhancing security and governance, citing the need to protect the Ruby ecosystem from supply chain attacks [11][12] Summary by Sections Project Management and Governance - RubyGems and Bundler, essential tools for the Ruby programming language, have been maintained by a dedicated team for years without formal compensation [2] - The abrupt removal of maintainers, including Ellen Dash, was executed by Marty Haught, Ruby Central's open-source director, raising questions about governance practices [5][6][11] Community Response - The Ruby community has reacted strongly against Ruby Central's actions, with many developers expressing disappointment and anger on social media [14][16] - Critics argue that Ruby Central's actions reflect a shift towards corporate influence over community-driven projects, undermining the principles of open-source collaboration [14][16] Future Implications - The incident highlights the ongoing struggle between professional management and community autonomy in open-source governance, emphasizing the need for transparency and communication [20] - As core maintainers resign, the new management team faces scrutiny to prove their capability and maintain community trust [20]