zlacker

A board member's perspective of the RubyGems controversy

submitted by Qwuke+(OP) on 2025-09-21 19:20:23 | 104 points 168 comments
[view article] [source] [go to bottom]

NOTE: showing posts with links only show all posts
12. sc68ca+JU2[view] [source] 2025-09-22 17:50:47
>>Qwuke+(OP)
This story is missing any context around what occurred. The only thing I was able to find was by searching, and I came to this PDF statement.

https://pup-e.com/goodbye-rubygems.pdf

> On September 9th, with no warning or communication, a RubyGems maintainer unilaterally:

> renamed the “RubyGems” GitHub enterprise to “Ruby Central”,

> added non-maintainer Marty Haught of Ruby Central, and

> removed every other maintainer of the RubyGems project.

> On September 18th, with no explanation, Marty Haught revoked GitHub organization membership for all admins on the RubyGems, Bundler, and RubyGems.org maintainer teams

Which is important context that was left out of this board member's statement.

◧◩◪
13. picadi+rV2[view] [source] [discussion] 2025-09-22 17:53:45
>>jaredc+MG
i read the article, but didn't see anything damning about it. how big of a staff do you think a tiny 501c3 like RubyCentral is? RC shepherds a pretty small community around a niche DSL with a shoestring non-profit budget that mostly goes towards running conferences.. you can see their financial reports here https://projects.propublica.org/nonprofits/organizations/300...

expectations around "strategic planning" and "marketing/PR" are not realistic. You should just be glad these randos don't have admin access to the Github org anymore. Any one of them were huge targets for adversaries who want to ship malware in Rubygems, supply chain attacks are very real and having commit access directly to rubygems/bundler is too powerful for a rando.

my main takeaway from reading all this is why were so many assorted people given such high levels of access..

◧◩◪
29. throwa+993[view] [source] [discussion] 2025-09-22 18:58:06
>>cayman+K43
It's not just one person.

Between the initial removal of access, then giving it back after explaining it was a mistake; the people involved started a conversation about governance to clarify/fix things.

https://github.com/rubygems/rfcs/pull/61

The conversation terminated because the majority of those people then had their access revoked again.

When weighing the facts here; which group or claimant has the most evidence for their claims? The technical folks with lots of commits over many years, or the treasurer of an organisation who says the impetus for this was a "funding deadline" so all access had to be seized?

◧◩◪◨⬒
32. dewey+hc3[view] [source] [discussion] 2025-09-22 19:12:14
>>khamid+573
Rails was built in a company to build commercial products so I’d say it had commercial interests from day one.

> 37signals built Rails for Basecamp and has since used it to create all their web products.

From: https://rubyonrails.org/foundation/37signals

◧◩
34. jmcgou+ye3[view] [source] [discussion] 2025-09-22 19:22:06
>>sc68ca+JU2
I found this helpful in explaining what's happened: https://www.theregister.com/2025/09/22/ruby_central_rubygems...

Sounds like they made some really big changes and put zero effort into communicating to people who've spent 10+ years working on the project.

◧◩◪
41. fwip+Gl3[view] [source] [discussion] 2025-09-22 19:57:34
>>jmcgou+ye3
Thanks - that was helpful indeed. From there, I also found the linked post by Tekin Süleyman ( https://tekin.co.uk/2025/09/the-ruby-community-has-a-dhh-pro... ) to be informative.
◧◩◪◨
54. lloeki+dr3[view] [source] [discussion] 2025-09-22 20:28:03
>>genera+an3
From TFA:

> Let's get some kind of committer agreement in place with those folks who need access (the same way many other high profile open source projects have), and remove access from those who don't, while still being fully open to accepting PRs and being open to re-welcoming them as committers if they decide that is how they want to spend their time in the future.

> Here's the challenge. How do you tell someone that has had commit and admin access to critical infrastructure long after that need has expired that you need to revoke that access without upsetting them?

deivid-rodriguez's last commits were Sept 18: https://github.com/rubygems/rubygems/commits/master/?since=2...

With 7873 commits since 2018 he's 2x over the second one and crushingly the most active contributor since then: https://github.com/rubygems/rubygems/graphs/contributors

However you slice it, none of that fits into TFA's above narrative.

His access being revoked can only be described as complete bonkers.

◧◩◪
59. genera+Gs3[view] [source] [discussion] 2025-09-22 20:35:03
>>cayman+K43
Wait, what?

A maintainer of RubyGems was forcibly removed from the RubyGems GitHub org — which was renamed to Ruby Central — along with every other maintainer. Then access was restored, then revoked again. There was no explanation, no communication, and no understandable reasoning for this.

And still! If there is an "official" statement, I can't find one on https://rubycentral.org/.

This wildly transcends "issues with both internal and external communication" or "we're just a bunch of makers who can't be expected to be good at organization or communication" (to highly paraphrase TFA). This is an absolutely disastrous breach of the community's trust.

◧◩◪◨
68. McGloc+fB3[view] [source] [discussion] 2025-09-22 21:24:07
>>fwip+Gl3
Wow! When that one DHH blog went around the other day, I didn't actually pay attention to who the author was. All I saw was yet another bigoted rant and just skimmed it and rolled my eyes. (e: here it is to save people the effort: https://world.hey.com/dhh/as-i-remember-london-e7d38e64 )

I should not have skimmed it. From your link:

> In the same post he praises Tommy Robinson (actual name Stephen Christopher Yaxley-Lennon), a right-wing agitator with several convictions for violent offences and a long history of association with far-right groups such as the English Defence League and the British Nationalist Party. He then goes on to describe those that attended last weekend’s far-right rally in London as “perfectly normal, peaceful Brits” protesting against the “demographic nightmare” that has enveloped London, despite the violence and disorder they caused.

> To all of that he ads a dash of Islamophobia, citing “Pakistani rape gangs” as one of the reasons for the unrest, repeating a weaponised trope borne from a long since discredited report from the Quilliam Foundation, an organisation with ties to both the the US Tea Party, and Tommy Robinson himself.

This is ... disqualifying. That's the best word I can summon here to express my dismay. This is a crossed line. Absolutely nutso.

edit2: Uh wow I really should not have skimmed it. Here's one paragraph from DHH's blog itself:

> Which brings us back to Robinson's powerful march yesterday. The banner said "March for Freedom", and focused as much on that now distant-to-the-Brits concept of free speech, as it did on restoring national pride. And for good reason! The totalitarian descent into censorious darkness in Britain has been as swift as its demographic shift.

Well, if that doesn't speak volumes as to DHH's values, I don't know what does.

◧◩◪◨
88. gus_ma+S14[view] [source] [discussion] 2025-09-23 00:10:18
>>bigiai+4W3
> The post appears to be signed as "MINASWAN", a well know pseudonym for Yukihiro Matsumoto, the chief designer of the Ruby programming language.

From https://en.m.wiktionary.org/wiki/MINASWAN

> Initialism of Matz is nice and so we are nice: a motto of the Ruby programming language community, in reference to the demeanor of Yukihiro Matsumoto (nicknamed Matz) [...].

◧◩◪◨
90. runjak+344[view] [source] [discussion] 2025-09-23 00:29:04
>>genera+Gs3
1. Visit https://rubycentral.org

2. Click News.

3. It’s the top item.

Direct link: https://rubycentral.org/news/strengthening-the-stewardship-o...

103. mikemc+9z4[view] [source] 2025-09-23 06:12:12
>>Qwuke+(OP)
I’m the Homebrew Project leader and care a lot about Ruby so met with both sides to attempt to mediate and posted two threads on Bluesky about what went down:

https://bsky.app/profile/mikemcquaid.com/post/3lz7klsyue22f

https://bsky.app/profile/mikemcquaid.com/post/3lzfxctubbk2y

TL;DR: Regardless of what you think of RubyCentral’s actions, it’s very clear they absolutely screwed up the execution and communication here. In general the transparency is far below what you’d expect from an open source organisation.

◧◩◪◨⬒
109. kgwgk+6C4[view] [source] [discussion] 2025-09-23 06:37:00
>>McGloc+fB3
> To all of that he ads a dash of Islamophobia, citing “Pakistani rape gangs” as one of the reasons for the unrest, repeating a weaponised trope borne from a long since discredited report

Were independent inquiries also repeating weaponised tropes from long since discredited reports?

“By far the majority of perpetrators were described as 'Asian' by victims, yet throughout the entire period, councillors did not engage directly with the Pakistani-heritage community to discuss how best they could jointly address the issue. Some councillors seemed to think it was a one-off problem, which they hoped would go away. Several staff described their nervousness about identifying the ethnic origins of perpetrators for fear of being thought racist; others remembered clear direction from their managers not to do so.”

https://www.rotherham.gov.uk/downloads/file/279/independent-...

◧◩
119. byroot+PQ4[view] [source] [discussion] 2025-09-23 08:47:20
>>baggy_+SO2
He's specifically among the 3 people still owner of the bundler gem [0], they were 6 just a few weeks ago [1]

[0] https://rubygems.org/gems/bundler

[1] https://web.archive.org/web/20250824033341/https://rubygems....

◧◩◪◨⬒⬓
121. pjc50+JW4[view] [source] [discussion] 2025-09-23 09:40:47
>>kgwgk+6C4
https://www.telegraph.co.uk/news/2025/07/29/officer-raped-ro...

The ultimate problems lie in the police: they are generally terrible at handling rape cases, and in this case there are claims that they were actively complicit in some of the rapes.

Using the actions of some members of an ethnic minority to justify .. well, any action against people who were not actually personally involved, is textbook discrimination.

◧◩◪◨⬒⬓⬔⧯▣▦
128. kgwgk+a65[view] [source] [discussion] 2025-09-23 11:10:55
>>maleld+l25
You have never seen the slogan “from the river to the sea”?

https://harvardharrispoll.com/wp-content/uploads/2023/12/HHP...

Do you think that the long-term answer to the Israel-Palestinian dispute is for Arab states to absorb the Palestinians, for there to be two states, Israel and Palestine, or for Israel to be ended and given to Hamas and the Palestinians?

51% in the 18-24 group chose the third option.

◧◩◪◨⬒⬓
129. aquari+U85[view] [source] [discussion] 2025-09-23 11:36:17
>>ethagn+WE3
Yeah, it was funny the first time a YouTuber[0] did something like that but now I feel like the joke got out of hand a bit, I blame the uptrend of opinionated configs to turn code editors into bona fide IDEs[1][2][3] for this.

Welp, looking forward to the holy wars between people running different influencers' configs five years from now. Who knows, maybe we'll see premium versions of those too.

[0] DistroTube which maintains DTOS, https://distro.tube/dtos/

[1] LunarVim

[2] AstroVim

[3] Doom Emacs

◧◩◪◨⬒⬓⬔⧯▣▦
132. em-bee+If5[view] [source] [discussion] 2025-09-23 12:20:42
>>simian+H35
how is this not against immigration?

https://world.hey.com/dhh/as-i-remember-london-e7d38e64

London is no longer the city I was infatuated with in the late '90s and early 2000s. Chiefly because it's no longer full of native Brits. In 2000, more than sixty percent of the city were native Brits. By 2024, that had dropped to about a third. A statistic as evident as day when you walk the streets of London now.

Copenhagen, by comparison, was about eighty-five percent native Danes in 2000, and is still three-quarters today. Enough of a foreign presence to feel cosmopolitan, but still distinctly Danish in all of its ways. Equally statistically evident on streets and bike lanes.

But I think, what would Copenhagen feel like, if only a third of it was Danish, like London? It would feel completely foreign, of course. Alien, even. So I get the frustration that many Brits have with the way mass immigration has changed the culture and makeup of not just London, but their whole country.

◧◩◪◨⬒⬓⬔⧯
135. em-bee+tp5[view] [source] [discussion] 2025-09-23 13:15:37
>>simian+sK4
They would become Danish

you have to retain a majority of that heritage, and integrate newcomers. Otherwise it's no longer Denmark.

what you are asking is not possible without rejecting immigration.

that is the delusion. it is the same all over europe. people expect 100% integration. yet at the same time, prejudices will reject them if they are not completely invisible. that is not possible, and it is not the integration i would want. i have written about this before: >>44746099

◧◩◪◨⬒⬓⬔⧯
137. fredri+Gr5[view] [source] [discussion] 2025-09-23 13:27:47
>>simian+lJ4
> That's a misrepresentation of statistics though.

I can't speak for Norway, but in Sweden the only party worth keeping an eye on that adheres to the usual combination of pro-Russia, anti-abortion, anti-immigrant, anti-EU rhetoric etc is Sverigedemokraterna (formerly Bevara Sverige Svenskt, a party based solely on the idea of an ethnostate). They're hovering around 20%.

> But my point was that I am absolutely sure the majority of Norwegians _want Norway to remain a country that retains its cultural history_ while not being exclusive to one ethnic group. It's about retaining a majority.

Is the existence of history dependent on the ethnicity of the person reading it? I'm sure you've met non-native people who are in all other respects very much Norwegian.

Unless you mean to imply that culture is constrained to genetics. I deeply hope that that is not what you meant.

> I don't understand why that sentiment is so problematic here on HN, because simultaneously people are clamoring for a Palestinian state for the Palestinian people.

How many Norwegian cities were leveled by bombs this year? How many were murdered by foreign military?

> Why can't Norway have a Norwegian state for the Norwegian people? Or Denmark? Or the UK?

They do. Here:

https://en.wikipedia.org/wiki/Norway https://en.wikipedia.org/wiki/Denmark https://en.wikipedia.org/wiki/UK

All fully functioning sovereign states, all internationally recognized by their peers and enemies alike.

◧◩◪◨⬒⬓
150. schain+ST6[view] [source] [discussion] 2025-09-23 20:26:38
>>em-bee+Uc5
Additional context — DHH's latest blog post: https://world.hey.com/dhh/as-i-remember-london-e7d38e64

Using your personal brand to espouse the values of ethnonationalism fundamentally serves the capital class wishing to divide and exploit social order among those who labor. This is so rich, coming from the guy who literally created a tool that increases the value of labor.

So, if I had to guess, the smart, critical thinkers in the _global_ Ruby community might find this whole situation reeks.

If I were an immigrant to the UK and a Rails developer, and DHH is getting re-platformed while saying crazy stuff like this, I would think twice about my career choices going forward — Or, push the Ruby community not to stand with a garbage attitude like this, even if from a BDFL-type personality. I _invested_ my life into promoting the use of your tool, while you disparage me based on skin color and country of origin for the sake of some 'ye olde country' vibefest?

Does DHH even know where his principles lie?

◧◩◪◨⬒⬓⬔⧯▣▦▧▨◲◳⚿⛋
152. em-bee+927[view] [source] [discussion] 2025-09-23 21:14:22
>>simian+NS6
you are completely missing the point. what exactly should germany have done? let those people suffer? stick them in crowded refugee camps?

you do not get to turn a generous humanitarian aid gesture into blaming germany for being dumb to let all these people in.

this is not ignoring observed reality. observed reality is a consequence of people not being welcoming enough. of not being supporting and considerate of the foreign culture and not doing enough to befriend these people. as i linked in my other post, i wrote about this before: >>44746099 we are not letting these people integrate in a way that allows them to keep some of their culture while giving them an opportunity to learn about our culture.

yes, the current reality may be rough. but those are growing pains. and they are consequences of war, and not consequences of allowing to many people to enter the country. by sharing the consequences of these wars germany becomes an ally to the victims, and that is a good thing. rejecting refugees would have turned germany into a villain and an ally of the perpetrators. i'd be ashamed if that happened.

[go to top]