strong_password v0.0.7 rubygem hijacked - With a Twist.devTute Costa July 3, 2019 I recently updated minor and patch versions of the gems our Rails app uses. We want to keep dependencies fresh, bugs fixed, security vulnerabilities addressed while maintaining a high chance of backward compatibility with our codebase. In all, it was 25 gems we’d upgrade. I went line by line linking to each library’s changeset. This due diligence never reported significant
