Hacker News Reader

Is this maybe an opportunity to re-evaluate the volunteer only aspect of RubyGems? I love the service (as I'm sure thousands of others do) and I'd happily pay for a subscription model that would fund a full-time developer/maintainer for the service. Based on how critical it is to the Ruby community I can't imagine that I'm alone in thinking this.

Just a suggestion!

View on HN

I am not personally interested in doing this. Nothing is stopping others, though: http://www.gemfury.com/

Hmm. That's for private gems. Interesting, but a different use-case. I'd chip in to pay for someone to maintain "rubygems.org" on a professional basis. It's awesome that some people take their private time to support such an essential service, but I'm with the grandparent that it might be good if it were run on a paid-for basis. Maybe through donations or similar, so that access is still free.

Anyone know how CPAN works in this regard?

CPAN is all volunteer. We happen to have a few really good SAs volunteer to keep core infrastructure up (which PAUSE, our upload server, just moved onto) ... but it's still volunteer.

How do you manage critical stuff like security problems such as this one? Do you have a process for that or is it best effort?

Maybe funds support the RubyGems maintainers and the gem authors?

Reply on news.ycombinator.com