Having never used Ruby or even heard of this feature before, is this not a massive supply chain-style attack surface? If I define methods/classes with the same names as common other packages, is there any way the user can tell which one they’re using if I get them to install my package?