NEW! stop supply chain attacks with dependency cooldowns

gem cooldowns (beta)

Get started

To use gem cooldowns, change your gem source URL:

- source "https://gem.coop"
+ source "https://beta.gem.coop/cooldown"

Cooldown period

The gem.coop public cooldown server hides gems until they have been published for 48 hours. If you need a different amount of time, let’s talk.

Why use cooldowns?

We should all be using dependency cooldowns.

Why did you make this?

Cooldowns are a useful tool to increase security. We wrote more about our reasons in the cooldowns release announcement.

Give us feedback

Join us in discussions on GitHub, or join the Bundler Slack and chat with us in the #gem-coop channel.

I found a bug!

Please report bugs to us by opening an issue on GitHub.