Securing Ruby's Future: Open Source Sustainability and RubyGems Innovation
Notes de l’épisode
Rarely does one person run product strategy, day-to-day operations, and fundraising for a mission-critical open source registry simultaneously. That is exactly what Marty Haught does as director of open source and acting executive director at Ruby Central.
Marty joined Ruby Central in 2024 after years serving on its board, inheriting a genuinely complex challenge. RubyGems has been the canonical Ruby package registry since 2004, and infrastructure donations from companies like Fastly, AWS, and Datadog contribute roughly $300,000 annually. Yet that figure still falls short of sustainable, predictable funding. The organization is building tiered organizational accounts to generate revenue while keeping core access free, free in the sense that developers never hit a paywall just to use Ruby's ecosystem.
Can a nonprofit registry serve hundreds of thousands of gems securely without reliable recurring revenue? That tension sits at the heart of this conversation. The newly launched security engineers in residence program (started in May) has already found 14 legitimate vulnerabilities across the top 1,000 most-used gems using AI-assisted scanning through a tool called Scrutineer.
If you care about the future of Ruby's infrastructure, this episode gives you an honest look at what it takes to keep it running. Listen now.