I feel like a good business model would be doing security reviews on gems and selling access to the "verified" gem repo. This is essentially what RedHat does for RHEL / rpms
Don’t ask forgiveness, radiate intent - Elizabeth Ayer - Medium
"Get into the habit of signaling every time you change direction. Signal even when you do not see anyone else around. It is easy to miss someone who needs to know what you are doing."