#364: Multiple Vulnerabilities in RubyGems

Jobs

• Senior Full-Stack Developer at Razeware (Remote)We're seeking an engineer to help overhaul raywenderlich.com. Join our team and help bring the site to the next level. Razeware LLC
• Remote Ruby on Rails Developer at SilverfinYou're looking for hands on RoR work where you have impact, in a tight knit remote team? Come build @getsilverfin with us. Silverfin

Can't find the right job? Want companies to apply to you?Try Hired.com.

In brief

• The Structure and Interpretation of Ruby Programs tutorial
  An explanation covering the tokenization, parsing, and compilation of Ruby programs. 
  Dean Nasseri
• Integrating a Third Party API with Rails 5 tutorial
  Includes requests with Faraday and caching. 
  Runtime Revolution
• Integrating Elm with Rails tutorial
  Elm is a function language that compiles to JavaScript. 
  Nimmy Vipin
• Keep Your Specs Up With the Times tutorial
  Coding your tests to interfaces, just like your classes, can keep your specs nice and fresh. 
  Eliav Lavi
• Using the Facade Design Pattern in Rails tutorial
  Use this pattern to hide data prep and other components from the controller. 
  Krzysztof Kempiński
• What I Learned Reading the spreadsheet_architect Code tutorial
  In short, a trick on how to limit the scope of an ActiveRecord query. 
  Arkency Blog
• Quick Tip: Get The Version Number of a Rails App in Production tutorial 
  Lorenzo Sinisi
• How to Make Ajax Calls The Rails Way tutorial
  A follow-up to an article about Ajax and Rails we linked last week. 
  Patrik Bóna
• An In-Depth Look at Ruby's Exception System 
  Ruby's exception system is more powerful than many people realize. This book shows you how to get the most from it. 
  Honeybadger  Sponsored
• How I Lost 17,000 GitHub Auth Tokens in One Night story 
  Richard Schneeman
• Careful What You Measure: MJIT vs TruffleRuby opinion 
  Tobias Pfeiffer
• Roll Your Own Private Gem Server on Google Cloud Platform tools
  Google has released a gem enabling the creation of a gem server on GCP with a single command. 
  Google Cloud Platform Blog
• Real-time monitoring for Ruby apps tools
  Troubleshoot performance issues with end-to-end traces, interactive flame graphs, and sophisticated alerts. Try free. 
  Datadog  Sponsored
• async: A Composable Asynchronous I/O Framework for Ruby code
  Based on nio4r and timers. 
  Socketry
• Yard-Junk: Get Rid of The Junk in Your YARD Docs code
  Think of it as a linter for YARD docs. 
  Victor Shepelev
• zen-rails-base-app: A Base Application for Rails 5.1 Projects code
  Includes several development, test, and other gems to bootstrap your Rails app efficiently. 
  Bruno Facca
• BatchLoader: A Generic Lazy Batching Mechanism to Avoid N+1 Queries code 
  
• “CircleCI 2.0 is fast. We reduced builds from minutes to 12 seconds.”   
  CircleCI  Sponsored