Nice, @…'s blog post about #Bundler's new checksums is worth a read:
Bundler 2.6: Enhanced Security with Built-in Checksum VerificationProtect your Ruby projects from supply chain attacks with Bundler 2.6's new checksum verification. Learn how to implement this crucial security feature today.