About this episode

The episode discusses trust and governance in open source alongside software security and AI-assisted development.

This episode of Remote Ruby opens with stories of exhaustion from a sleepless week. Then, Chris, Andrew, and David spend most of the episode unpacking two big themes: trust and governance in open source, and the growing mess of software security and AI-assisted development. They dig into the new Ruby Central write-up on the RubyGems/Bundler fracture and question whether it actually clarifies the path forward, then pivot into the Axios npm compromise, supply-chain risk, and how fragile modern ...

People in this episode

Hosts: Chris Oliver, Andrew Mason, David Hill

Topics covered

• trust in open source
• governance
• software security
• AI-assisted development
• supply-chain risk

Keywords

• open source
• software security
• AI tools
• supply-chain risk
• RubyGems
• Bundler
• Axios
• npm

Mentioned in this episode

Organizations: Ruby Central, RubyGems, Bundler, Axios, npm

More episodes of Remote Ruby

• Ruby Central Restructuring · April 24, 2026 · 39 min
• Joined by John Athayde · April 17, 2026 · 1h 23m
• Memcached Mayhem · April 3, 2026 · 59 min
• Conferences, AI Trends, and Sleepless Nights · March 27, 2026 · 34 min
• Unraveling GitHub Actions & Modern Auth Challenges · March 20, 2026 · 54 min
• Heroku, Hosting, and the AI Era · March 13, 2026 · 1h 11m

Explore listener stats, chart rankings, contacts and more on the Remote Ruby podcast page.