Is dependabot-bundler safe to use?

dependabot-bundler has no known vulnerabilities on the latest version (0.373.0). DepScope rates its health at 62/100 (moderate risk).

What is the latest version of dependabot-bundler?

The latest version of dependabot-bundler is 0.373.0, released 2026-04-30.

Does dependabot-bundler have known vulnerabilities?

No known vulnerabilities on the latest version of dependabot-bundler.

Is dependabot-bundler deprecated?

No, dependabot-bundler is actively maintained. Latest release: 0.373.0 (2026-04-30).

What are alternatives to dependabot-bundler?

Popular alternatives to dependabot-bundler in RubyGems include: jmespath, netrc, thread_safe, crass, tzinfo.

What license does dependabot-bundler use?

dependabot-bundler is licensed under MIT.

dependabot-bundler

rubygemsv0.373.0

Dependabot-Bundler provides support for bumping Ruby (bundler) gems via Dependabot. If you want support for multiple package managers, you probably want the meta-gem dependabot-omnibus.

License MITpermissive20 versions2 deps148 weekly dl

dependabot/dependabot-core

62

/ 100

Health

use with caution

[email protected] low health (62/100) — consider alternatives

Moderate health score (62/100) — verify manually

Health breakdown0 – 100

25/25

maintenance

3/20

popularity

25/25

security

9/15

maturity

0/15

community

Vulnerabilities

0

none known

Health History

Dependency Tree

License Audit

Dependencies (2)

dependabot-common parallel

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/rubygems/dependabot-bundler