zlacker

[return to "Shopify, pulling strings at Ruby Central, forces Bundler and RubyGems takeover"]
1. softwa+I8[view] [source] 2025-09-23 16:05:00
>>bradge+(OP)
> they had a problem with Ruby Central taking control of the RubyGems open source code repositories and gems, which Ruby Central never owned.

I don’t quite get how this happened? Ruby Central can’t just reach into my GitHub and declare they own something. Was it under the Ruby central account? Or an org account that decided they “own” the repo?

◧◩
2. joeldr+kc[view] [source] 2025-09-23 16:21:23
>>softwa+I8
I said in the post that HSBT who was a maintainer invited Marty as an owner of the GitHub account. This was against the wishes of the other maintainers who had established practices for adding new maintainers.
◧◩◪
3. didibu+hn[view] [source] 2025-09-23 17:04:06
>>joeldr+kc
So HSBT was the owner? And transfered ownership?
◧◩◪◨
4. joeldr+Qp[view] [source] 2025-09-23 17:12:17
>>didibu+hn
HSBT was a maintainer who had "owner" permissions on GitHub.
◧◩◪◨⬒
5. evolve+zY[view] [source] 2025-09-23 20:10:15
>>joeldr+Qp
It would seem that HSBT being a maintainer owner AND shopify employee faced a significant conflict of interest. Also I don’t think it’s a stretch given the context and clear direction coming from shopify for the actions of others to assume that HSBT themselves were directed by their employer to add Marty as an owner.

I sense there’s legal grounds here but can’t fully articulate what the legal case would be.

◧◩◪◨⬒⬓
6. byroot+j61[view] [source] 2025-09-23 20:54:12
>>evolve+zY
hsbt (no caps) isn’t a Shopify employee.

He’s one of the most active Japanese Ruby core committer, employed by ANPAD, and also part time contractor for Ruby Central, and one of the most active committers to rubygems/bundler.

[go to top]