Add Unused Dependency Check for Ruby Gems
还没有人认领这个 Issue。
评估
调研方向
Start by reviewing the main CI workflow and the current Gemfile, then investigate whether degem works reliably and compare the suggested alternatives bundle-checker and gem-unused. Done means a stable dependency check is integrated, reports current unused gems, handles documented false positives, and fails CI when unused dependencies are detected.
由索引模型根据 Issue 内容生成。
描述
feat: Add Unused Dependency Check for Ruby Gems
Description:
To maintain a clean and efficient codebase, we need to add an automated process to the zitadel/client-ruby CI pipeline. The goal of this process is to detect and report any gems listed in the Gemfile that are no longer used in the project. The initial tool considered for this task was degem.
Problem:
The proposed tool, degem, does not appear to be functional in our current environment. Further investigation suggests the tool may be unmaintained, with its last commit several years ago. This makes it an unreliable choice for our CI pipeline, as it may have compatibility issues with modern Ruby versions and bundler.
Impact:
- Without an automated check, the project is at risk of accumulating unused dependencies over time.
- Unused gems lead to project bloat, slower
bundle installtimes, and an increased potential security surface. - The dependency tree is less clear, making maintenance more difficult for developers.
Tasks:
- Attempt a final investigation to determine if
degemcan be made to work reliably. - If
degemis not viable, research and evaluate alternative tools for detecting unused Ruby gems (e.g.,bundle-checker,gem-unused). - Select a reliable tool and integrate it into the CI pipeline as a new check.
- Run the tool on the codebase and generate an initial report of unused dependencies.
- Configure the tool to ignore any known false positives (e.g., gems used by frameworks or other tools but not directly required in the code).
- Create a follow-up pull request to remove the confirmed unused gems from the
Gemfile.
Expected Outcomes:
- The CI pipeline includes a job that automatically fails if it detects unused gems in the
Gemfile. - The project's dependencies are kept clean and minimal, improving maintainability and reducing bloat.
- Developers are immediately notified of unused dependencies when contributing code.
Additional Notes:
- The primary goal is to establish a reliable dependency check, not necessarily to use
degem. The chosen solution should be stable and actively maintained. - This task will likely require updating the main CI workflow file to add a new step for the dependency analysis.
- 主要语言
- Ruby
- 星标
- 6
- 派生
- 2
- 平均合并
- 11 分钟
- 30 天内合并 PR
- 2
环境准备
- 提供 Dockerfile 或 Docker Compose 文件
- 有 Pull Request 模板
- 没有贡献指南
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
zitadel/client-ruby 的其他 Issue
-
难度 4/5 3-5 天 新手友好度 45/100
zitadel/client-ruby#87 ·
-
Release SDK for V5可能已有人在做 @mridang 于 317 天前认领。 未关闭
zitadel/client-ruby#76 · 已指派 1 人 ·
-
Fixed the messy auto-generated serde logic in the library可能已有人在做 @mridang 于 526 天前认领。 未关闭
zitadel/client-ruby#29 · 已指派 1 人 ·
-
Update Qodana Linter for Ruby Support可能已有人在做 @mridang 于 124 天前认领。 未关闭
难度 4/5 3-5 天 新手友好度 35/100
zitadel/client-ruby#27 ·
查看 zitadel/client-ruby 的全部 Issue
相似的 Issue
-
agent:triaged bug bughunt pm:bundler priority:p1
难度 2/5 1-3 小时 新手友好度 70/100
SocketDev/socket-patch#1573 · 1 条评论 ·
维护者通常 1 天内回复
-
bug chat verified
难度 2/5 1-3 小时 新手友好度 72/100
维护者通常 6 天内回复
-
🐞 bug pending triage
难度 2/5 1-3 小时 新手友好度 72/100
CircuitVerse/CircuitVerse#8031 · 2 条评论 ·
维护者通常 1 天内回复
-
Empty members in the Accept header cause a 500可能已有人在做 @koic 今天认领。 未关闭bug
难度 2/5 1-3 小时 新手友好度 82/100
modelcontextprotocol/ruby-sdk#609 ·
维护者通常 1 天内回复
-
BazaRb::Fake#enter rejects dotted badges accepted by BazaRb#enter可能已有人在做 关联的 PR 仍在进行中或已合并。 未关闭
难度 1/5 1-3 小时 新手友好度 84/100
维护者通常 1 天内回复