Lightnews — Scholar-powered news

Rachael Wright-Munn

@chaelcodes.bsky.social

120 followers 84 following 200 posts

Software Engineer since 2012 | Live coding on Twitch since 2019 | open-source contributor | Programming Game Enthusiast | Featured in "One Dreamer" video game! ✨

Posts Media Videos Starter Packs

Pinned

Rachael Wright-Munn @chaelcodes.bsky.social · 17d

I've been iterating on "Play with your Code"! Programming games make programming fun through a joyful developer experience. We're going to explore practical tips for your day job inspired by programming games!

I'm very excited!

Please come see it!!✨

Irina Nazarova @inazarova.bsky.social · 18d

Friends, tickets for the San Francisco Ruby conference are on sale and available. Grab yours, and I’ll see you with 600 Ruby friends and dozens of Ruby startups to pave the bright future for Ruby and Rails together on November 19-21!
sfruby.com

2 4 8

Rachael Wright-Munn @chaelcodes.bsky.social · 2h

Every time I ask who the maintainers were I get a different answer. Do you have any sort of governance, documentation, or team structure?

This is the closest and most recent thing I've found. It lists everyone from gem.coop (and more), but doesn't include HSBT.

rubycentral.org/news/ruby-ce...

Ruby Central's First Annual OSS Report (2024)

This is a web preview of Ruby Central's FIRST Annual OSS Report, for 2024, sharing everything we've been working on over the last 12 months and the impact of our work. We will be publishing a finalize...

rubycentral.org

1 1

Rachael Wright-Munn @chaelcodes.bsky.social · 2h

Found it! It doesn't specifically reference his lawyer though, and thankfully the language is "own or create" and not "distribute".

Rachael Wright-Munn @chaelcodes.bsky.social · 2h

Arko told Socket, “I have requested Ruby Central stop claiming to own or create ‘bundler’, although they are welcome to modify the source code and share it under some other name. Ruby Central has replied only to ask for time to review my request with their legal counsel.”

socket.dev/blog/gem-coo...

3 1 2

Rachael Wright-Munn @chaelcodes.bsky.social · 3h

Maybe from when he trademarked Bundler?
andre.arko.net/2025/09/25/b...
Elsewhere he said that he's asked them to stop distributing Bundler, and they'd asked to review it with their legal team. I can't find that quote though.

2 1 6

Rachael Wright-Munn @chaelcodes.bsky.social · 4h

What I'm hoping to get out of these first 2, and my future follow-up questions, is how Martin, as a prospective project lead for gem.coop views this proposal.

Did he know about it? Did he support it? How would he handle it if it was proppsed to him? Does he view it as PII?

Rachael Wright-Munn @chaelcodes.bsky.social · 4h

Is it still just IP addresses if it ends up associated with a company name? But sure, we can call it CII, company-identifying information.

1 1

Rachael Wright-Munn @chaelcodes.bsky.social · 10h

Thus far, you've been level-headed, empathetic, and transparent. I appreciate that.

I think it's important that users of gem.coop know:

- Were you aware of André's proposal to RC of selling PII associated with gem usage data?
- Did you know he talked to Mike Perham about buying it?

Reddit comment from mperham:

Andre has always been exploring ideas for sustaining rubygems maintenance and paying the team a fair wage. That was the ethos behind Ruby Together.

In this case I have first hand knowledge since he pitched me on the idea: would Sidekiq, being a big sponsor of Ruby Central in the past, be interested if rubygems could somehow use the remote IP to identify the companies downloading the `sidekiq` gem so I could use that to upsell those companies to Sidekiq Pro, i.e. send them a cold email? Lead generation tools are common and valuable to literally every company. I pay $1000/mo and get a set of leads every month. Seems reasonable.

I can see how your worst case scenarios might paint this in a bad light. We never discussed edge cases or privacy concerns as he was just spitballing this idea. That's as far as it got and you can see the same level of thought in his email they published. Hope that clarifies the intent.

Email from andre@arko.net, sent on Aug 3, 2025
Subject: Secondary on-call proposal

Hi Marty, here's a written up version of the proposal that I mentioned on Friday. Let me know what you think.

### In Brief

I'd like to offer Ruby Central a contract to cover secondary on-call in exchange for a copy of the gem download access logs.

### Background

Since Ruby Central has run out of funds for a secondary on-call, and maintenance budget has been so limited, I've been brainstorming options. Yesterday I met someone who has had some success building a system to analyze download logs from a package registry and using those kids to determine which companies are installing the packages. From our conversations, the market overall isn't enough to run a company and hire employees, but seems like it could cover the costs of paying for secondary on-call. If it's more successful than expected, I would be open to potentially using it to pay the costs of primary on-call as well.

I believe this is a win-win because Ruby Central will get secondary on-call coverage that it needs but currently can't afford, and my consultancy will have a project to build that could bring us revenue in the future while we are still getting set up and are low on client work.

### Detailed proposal

My consultancy would sign a contact with Ruby Central to provide secondary on-call coverage, with rotations and shifts coverage handled by us internally. We could offer to respond to escalated alerts (from the primary on-call to us as the secondary) within 30 minutes, any time of day or night. In exchange, we would receive access to a copy of the RubyGems.org HTTP access logs.

If we are successful at turning download logs into companies using packages and versions, we would be happy to report back what we're able to determine, and make an agreement to provide that information for future RubyGems.org paid organizations customers.

1 2

Reposted by Rachael Wright-Munn

Stan Lo @st0012.dev · 1d

Thank you for writing this, especially:

> Aaron got nerd sniped into making Bundler faster, and now he’s being called out for supposedly being part of a hostile takeover? Give me a break.

Jean Boussier @byroot.bsky.social · 1d

I tried to explain why I don't believe the recent accusations toward my former teammates, as well as how the Ruby and Rails Infra team at Shopify operates and why it can be trusted.

byroot.github.io/opensource/r...

Dear Rubyists: Shopify Isn’t Your Enemy

I’ve been meaning to write a post about my perspective on Open Source and corporate entities. I already got the rough outline of it; however, I’m suffering from writer’s block, but more importantly, t...

byroot.github.io

5 22

Rachael Wright-Munn @chaelcodes.bsky.social · 18h

How do you interpret it?

Rachael Wright-Munn @chaelcodes.bsky.social · 19h

Thank you for coming by and merging it! It was super fun! 🙌

Rachael Wright-Munn @chaelcodes.bsky.social · 19h

OMG. This is WILD.

That email? And stealing credentials? And they still tried to keep it professional with his departure.

Ruby Central @rubycentral.org · 21h

Here’s a note from our Executive Director regarding our recent security incident.
rubycentral.org/news/rubygem...

Rubygems.org AWS Root Access Event – September 2025

As part of standard incident-response practice, Ruby Central is publishing the following post-incident review to the public. This document summarizes the September 2025 AWS root-access event, what…

rubycentral.org

1 4

Rachael Wright-Munn @chaelcodes.bsky.social · 19h

During Hacktoberfest, I normally like to explore, push myself, and contribute to other people's projects.

Today on stream, we added a "Mutual Events" tab to a profile on RubyEvents.org, so you can see which events you and someone else are both attending!!

Super special thanks to @marcoroth.dev. ✨

1 2 8

Rachael Wright-Munn @chaelcodes.bsky.social · 19h

Guess what I did on stream today?? ❤️

RubyEvents @rubyevents.org · 20h

We now show a new "Mutual Events" tab when viewing an other person's @rubyevents.org profile!

Thanks to @chaelcodes.bsky.social for this great contribution!

1 5

Rachael Wright-Munn @chaelcodes.bsky.social · 19h

Thank you! I'm glad you like it! I'm looking forward to using it.

Rachael Wright-Munn @chaelcodes.bsky.social · 1d

They have this map.

Obviously I'm looking forward to getting my Ruby passport, and I'm sure the lounges will be interesting.

But what is this secret experience?

Map of SF Ruby Conference's venue.

There are food trucks. 2 theaters - Blackbox and Main Stage. 2 lounges - Zero Gravity and Spacesuits. A workshop studio. There's a Ruby Embassy room.

Then there's a room labeled "Secret Experience".

1 2

Rachael Wright-Munn @chaelcodes.bsky.social · 1d

Evil Martians delivers deep technical competency with this touch of delightful whimsy.

I cannot wait to see what a conference organized by them looks like!

The program is focused on the bleeding edge of Ruby, but I want to see the rest!

San Francisco Ruby Conference, Nov 19-21 @sfruby.com · 1d

This November in San Francisco... 💎❤️
Grab your tickets before October 20 at sfruby.com
youtu.be/m2P9PZwi8W4

The San Francisco Ruby Conference: join in at sfruby.com

YouTube video by Evil Martians

youtu.be

1 1 5

Rachael Wright-Munn @chaelcodes.bsky.social · 1d

I really want to go! For me, a lot of it is the community. I've got a friend, and some of my favorite Twitch chatters and rubyists are in Brazil.

I've been to a Ruby Retreat in NZ, but this would also be my first international conference!

I think I'll set an alarm for when the tickets drop.

Rachael Wright-Munn @chaelcodes.bsky.social · 1d

For the last several years, I've been trying to get a ticket to Tropical.rb!

But they always sell out so fast, before I can secure childcare, or I'm like super-pregnant.

This year though?? I'm getting a ticket. 🤞

Tropical on Rails @tropicalonrails.bsky.social · 2d

[ENG] 🎟️ It’s official!
Ticket sales for Tropical on Rails 2026 open on October 30th at 12pm(gmt-3)! 💎🌴 

[PT-BR] 🎟️ É oficial!
As vendas dos ingressos para o Tropical on Rails 2026 abrem no dia 30 de outubro as 12h! 💎🌴 

#TropicalOnRails #RubyOnRails

1 3

Rachael Wright-Munn @chaelcodes.bsky.social · 1d

I'm curious what you come up with. I've been wanting a replacement for Google photos for a while.

Rachael Wright-Munn @chaelcodes.bsky.social · 1d

Thank you so much for inviting me to join! Despite the nature of the topic, I was really excited to be on a podcast I've listened to for so long, and listening to it was a trip!

Rachael Wright-Munn @chaelcodes.bsky.social · 1d

I've been a long time listener of Remote Ruby and appreciate the opportunity and trust Andrew showed in inviting me on to discuss such a controversial topic. ❤️

Please let me know if you give it a listen!

Andrew Mason @andrewm.codes · 2d

New Remote Ruby episode is out!

With @excid3.com on paternity leave, I brought in @drbragg.dev and @chaelcodes.bsky.social to unpack the recent controversies surrounding Ruby Central and its control over RubyGems and Bundler.

www.buzzsprout.com/2260490/epis...

Who Owns RubyGems? Inside the Ruby Central Controversy - Remote Ruby

In this episode of Remote Ruby, Chris is on paternity leave celebrating the birth of his son, so Andrew brings in Drew Bragg and Rachael Wright-Munn (aka ChaelCodes), to discuss recent controversies s...

www.buzzsprout.com

Rachael Wright-Munn @chaelcodes.bsky.social · 2d

Anyone over in Nashville?

Felipe Vogel @fpsvogel.bsky.social · 2d

📣 Calling all Nashville Rubyists 📣

A friend of a friend is restarting the Nashville Ruby User Group, and is looking for interested people: nashrb.com

Reposts appreciated!

Nashville Ruby User Group Signup

nashrb.com

1 4

Rachael Wright-Munn @chaelcodes.bsky.social · 2d

Good morning!

Photo of giant lily pads like the ones from the original post. Smaller lily pads and flowers surround them.

Photo credit: Rachael (me)

Rachael Wright-Munn @chaelcodes.bsky.social · 2d

And as for the different conclusion...

If I woke up one day, and my permissions were downgraded from owner to contributor for a project that I'd spent years on, paid my mortgage with, and felt a strong sense of responsibility for, I'd be heartbroken.

Rachael Wright-Munn @chaelcodes.bsky.social · 2d

Complicating this discussion on ownership, André has now claimed that *he* owns Bundler, or at least the trademark.

Not the community, not the maintainers, not Ruby Together, not Tidelift, not Spinel, but he himself.

andre.arko.net/2025/09/25/b...

Bundler belongs to the Ruby community

I’ve spent 15 years of my life working on Bundler. When I introduce myself, people say “oh, the Bundler guy?”, and I am forced to agree. I didn’t come up with the original idea for Bundler (that was Y...

andre.arko.net