Plug-and-play role/permission management with module-wise permissions generated from your own routes, one-line controller enforcement, and a unified audit log of role reassignments and permission grants/revokes — shipped as a mountable engine with paginated HTML admin screens and generators for i...

Official Ruby client for URLpipe. Get a page's Markdown, rendered HTML, a full-page screenshot, a PDF, metadata, a summary, keywords, structured data, console errors or a Lighthouse audit, rendered in real Chrome. Handles long analyses, retries with idempotency keys, and webhook signature verific...

MechaAuthorize provides a YAML-driven, closed-by-default route authorization system for Rails applications, complete with static route parity auditing and behavioral persona matrix probing.

MechaEncrypt enforces database column encryption parity in Rails applications via a YAML schema registry, static schema-to-model auditing, and behavioral ciphertext & index safety probing.

Shared RSpec examples, a per-Ractor storage shim, a class-state audit, RuboCop configs and a reusable CI workflow that hold a gem to explicit thread-safe, fiber-safe and Ractor-clean tiers.

PermissionForge stores permissions as Permission Sets that admins edit at runtime: per-model CRUD flags and custom actions, per-field read/edit access with masking, and row-level query rules. It applies them in your models (find_by, permission_scoped, attribute readers and serialization) and cont...

Custom auditing gem made for and by PEP. Rather than just saving the modifications made, this gem puts the changes in context by storing a separate context object. Multiple revisions can be attached to a single context such as a single http request.

HtmlScssClassChecker is designed to streamline the process of frontend development by scanning HTML and SCSS files and identifying classes that are either undefined or unused. This gem aims to facilitate cleaner, more maintainable, and efficient codebases by providing developers with the tools to...

Scans a Rails application for metrics relevant to security audits

The Faxage API can be used to send and receive faxes, gather sent fax images and transmittal pages, provision DIDs, enable and disable (busy out) DIDs, access CDRs, get realtime status, can be polled or can push sent and received fax notifications, check local number portability, manage users, re...

Redmine plugin for checking Redmine's own vulnerabilities

Allows to record models changes

ORM extension to track model changes. It also support keeping record of who made the changes and why.

ActiveHistory tracks and logs changes to your ActiveRecord models and relationships for auditing in the future.

sequel-state-machine hooks together the excellent Ruby Sequel ORM to the state-machines library, with auditing and other tools.

A gem for tracking record changes and controller actions

tracks_changes provides a way to easily keep track of changes to ActiveRecord models at an attribute level and maintains the typecasting in the database.

Logger which creates additional files for a more orderly logging information in Rails apps.

Uses created_by_user_id and updated_by_user_id to store the changes made to a record. This is limited to storing the user who created the record and the last user to update the record.

acts_as_versioned is good. This allows an attribute level rollback instead