thoughtbot/suspenders — pull request #437 by jferris (2014-11-05 16:14:50+00:00)
Title: Add bundler-audit

We've used this on a couple projects. Here's what it does:

* Scans your Gemfile for insecure dependencies.
* Uses publishd CVEs to find vulnerabilities.

To get set up with bundler-audit, this commit:

* Adds it to the development dependencies.
* Adds a rake task to invoke the CLI.
* Adds it to your default `rake` run.

https://trello.com/c/PltmBueK/210