I have to use several gems that download and compile C sources from github at install time.

Accounts get compromised, no checksumming in the world can help with that.

Gemfile.lock checksums by default on bundler 4+