{"id":13878329,"url":"https://github.com/oneclick/rubyinstaller2","last_synced_at":"2026-01-18T05:41:54.422Z","repository":{"id":40510245,"uuid":"78153411","full_name":"oneclick/rubyinstaller2","owner":"oneclick","description":"MSYS2 based RubyInstaller for Windows","archived":false,"fork":false,"pushed_at":"2026-01-12T06:02:49.000Z","size":2745,"stargazers_count":702,"open_issues_count":36,"forks_count":275,"subscribers_count":51,"default_branch":"master","last_synced_at":"2026-01-13T07:43:55.888Z","etag":null,"topics":["msys2","ruby","rubyinstaller"],"latest_commit_sha":null,"homepage":"https://rubyinstaller.org","language":"Ruby","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/oneclick.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG-2.4.md","contributing":null,"funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-01-05T22:29:40.000Z","updated_at":"2026-01-09T23:43:39.000Z","dependencies_parsed_at":"2025-12-17T22:10:48.980Z","dependency_job_id":null,"html_url":"https://github.com/oneclick/rubyinstaller2","commit_stats":null,"previous_names":["larskanis/rubyinstaller2"],"tags_count":117,"template":false,"template_full_name":null,"purl":"pkg:github/oneclick/rubyinstaller2","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/oneclick%2Frubyinstaller2","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/oneclick%2Frubyinstaller2/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/oneclick%2Frubyinstaller2/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/oneclick%2Frubyinstaller2/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/oneclick","download_url":"https://codeload.github.com/oneclick/rubyinstaller2/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/oneclick%2Frubyinstaller2/sbom","scorecard":{"id":706926,"data":{"date":"2025-08-11","repo":{"name":"github.com/oneclick/rubyinstaller2","commit":"0c2d666184a085fd9b242ceb017a953d62c501e2"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.7,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":0,"reason":"Found 1/26 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"14 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/ci.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: rubyinstaller-3.4.5-1-arm.7z.asc: https://github.com/oneclick/rubyinstaller2/releases/tag/RubyInstaller-3.4.5-1","Info: signed release artifact: rubyinstaller-3.3.9-1-x64.7z.asc: https://github.com/oneclick/rubyinstaller2/releases/tag/RubyInstaller-3.3.9-1","Info: signed release artifact: rubyinstaller-3.2.9-1-x64.7z.asc: https://github.com/oneclick/rubyinstaller2/releases/tag/RubyInstaller-3.2.9-1","Info: signed release artifact: rubyinstaller-3.4.4-2-arm.7z.asc: https://github.com/oneclick/rubyinstaller2/releases/tag/RubyInstaller-3.4.4-2","Info: signed release artifact: rubyinstaller-3.4.4-1-arm.7z.asc: https://github.com/oneclick/rubyinstaller2/releases/tag/RubyInstaller-3.4.4-1","Warn: release artifact RubyInstaller-3.4.5-1 does not have provenance: https://api.github.com/repos/oneclick/rubyinstaller2/releases/234963920","Warn: release artifact RubyInstaller-3.3.9-1 does not have provenance: https://api.github.com/repos/oneclick/rubyinstaller2/releases/234964337","Warn: release artifact RubyInstaller-3.2.9-1 does not have provenance: https://api.github.com/repos/oneclick/rubyinstaller2/releases/234964208","Warn: release artifact RubyInstaller-3.4.4-2 does not have provenance: https://api.github.com/repos/oneclick/rubyinstaller2/releases/219343282","Warn: release artifact RubyInstaller-3.4.4-1 does not have provenance: https://api.github.com/repos/oneclick/rubyinstaller2/releases/219169829"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: a command can only contain words and redirects; encountered (: docker/Dockerfile:18-19","Info: Possibly incomplete results: error parsing shell code: a command can only contain words and redirects; encountered (: docker/Dockerfile:29","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/oneclick/rubyinstaller2/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:153: update your workflow using https://app.stepsecurity.io/secureworkflow/oneclick/rubyinstaller2/ci.yml/master?enable=pin","Warn: containerImage not pinned by hash: docker/Dockerfile:1","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T06:53:49.955Z","repository_id":40510245,"created_at":"2025-08-22T06:53:49.955Z","updated_at":"2025-08-22T06:53:49.955Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28531323,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-18T00:39:45.795Z","status":"online","status_checked_at":"2026-01-18T02:00:07.578Z","response_time":98,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["msys2","ruby","rubyinstaller"],"created_at":"2024-08-06T08:01:46.518Z","updated_at":"2026-01-18T05:41:54.414Z","avatar_url":"https://github.com/oneclick.png","language":"Ruby","readme":"[![CI build status](https://github.com/oneclick/rubyinstaller2/actions/workflows/ci.yml/badge.svg)](https://github.com/oneclick/rubyinstaller2/actions/workflows/ci.yml)\n\n# RubyInstaller2\n\nThis project provides an Installer for Ruby-2.4 and newer on Windows based on the MSYS2 toolchain.\nIt is the successor to the MSYS1 based [RubyInstaller](https://github.com/oneclick/rubyinstaller/) which was used for Ruby-2.3 and older.\nIt is licensed under the 3-clause Modified BSD License.\n\nIn contrast to the old RubyInstaller it does not provide its own DevKit, but makes use of the rich set of [MINGW libraries](https://github.com/Alexpux/MINGW-packages) from the [MSYS2 project](https://msys2.github.io/).\nIt therefore integrates well into MSYS2 after installation on the target system to provide a build-and-runtime environment for installation of gems with C-extensions.\nThis and more changes are documented in the [CHANGELOG](https://github.com/oneclick/rubyinstaller2/blob/master/CHANGELOG-2.4.md#rubyinstaller-241-1---2017-05-25).\n\n## Using the Installer on a target system\n\n- Download and install the latest RubyInstaller2: https://github.com/oneclick/rubyinstaller2/releases\n\nThe non-Devkit installer file is enough to use pure Ruby gems or fat binary gems for x64-mingw-ucrt or aarch64-mingw-ucrt.\nIn order to install C based source gems, it's recommended to use the Devkit installer version.\nIt installs a MSYS2/MINGW build environment into the ruby directory that ships common build tools and libraries.\n\nSome gems require additional packages, which can be installed per `pacman`. See below.\nIts also possible to install MSYS2 manually from https://msys2.github.io/ and run `ridk install` afterwards to add non default, but required development tools.\nFor unattended install of Ruby and MSYS2 see the [FAQ chocolatey install](https://github.com/oneclick/rubyinstaller2/wiki/FAQ#user-content-choco-install).\n\n### The `ridk` command\n\n`ridk` is a cmd/powershell script which can be used to install MSYS2 components, to issue MSYS commands like `pacman` or to set environment variables for using MSYS2 development tools from the running shell.\n\nSee `ridk help` for further options:\n\n```sh\n  Usage:\n      C:/Ruby24-x64/bin/ridk.cmd [option]\n\n  Option:\n      install                   Install MSYS2 and MINGW dev tools\n      exec \u003ccommand\u003e            Execute a command within MSYS2 context\n      enable                    Set environment variables for MSYS2\n      disable                   Unset environment variables for MSYS2\n      version                   Print RubyInstaller and MSYS2 versions\n      use                       Switch to a different ruby version\n      help | --help | -? | /?   Display this help and exit\n```\n\n`ridk enable` can be used to enable MSYS2 development tools on the running console.\nThis makes `sh`, `pacman`, `make` etc. available on the command line.\nSee [the Wiki](https://github.com/oneclick/rubyinstaller2/wiki/The-ridk-tool) for further instructions to the `ridk` command.\n\n### Install gems with C-extensions and additional library dependencies\n\nThe base MSYS2 setup includes compilers and other build tools, but doesn't include libraries or DLLs that some gems require as their dependencies.\nFortunately many of the required libraries are available through the MSYS2 repositories.\nThey can be installed per `ridk exec pacman -S mingw-w64-x86_64-libraryname` similar to `apt-get` on Linux.\nExchange the prefix `mingw-w64-x86_64` by `mingw-w64-i686` for the 32-bit RubyInstaller.\n\nFor instance these popular gems can be installed like so from the source gem:\n\n- To install `sqlite3` gem:\n  ```sh\n    ridk exec pacman -S mingw-w64-x86_64-sqlite3\n    gem install sqlite3 --platform ruby\n  ```\n- To install `nokogiri` gem:\n  ```sh\n    ridk exec pacman -S mingw-w64-x86_64-libxslt\n    gem install nokogiri --platform ruby -- --use-system-libraries\n  ```\n\nSome gems are properly labeled to install dependent libraries per pacman.\nSee [the wiki](https://github.com/oneclick/rubyinstaller2/wiki/For-gem-developers#msys2-library-dependency) how such a label can be added to gems.\nAlso refer the [FAQ](https://github.com/oneclick/rubyinstaller2/wiki/FAQ) for additional install recommendations.\n\n\n## Building the Installer\n\nThis repository provides the packaging tasks to build RubyInstaller setup executables and 7zip files.\nIt doesn't compile any sources, but makes use of the [MSYS2-MINGW repository](https://github.com/Alexpux/MINGW-packages) and the [RubyInstaller2 pacman repository](https://github.com/oneclick/rubyinstaller2-packages) to download binaries and dependent libraries.\n\n### Automatic build on Github Actions\n\nThe installer is regularly built on [Github Actions](https://github.com/oneclick/rubyinstaller2/actions) for each push to the github repository.\nThe runner also executes the installer and runs all RubyInstaller tests and [ruby-spec](https://github.com/ruby/spec) on it, so that we are notified about breaking changes.\nIn addition to this, a daily build of the latest ruby development snapshot is compiled and packaged as RubyInstaller files.\nIt can be downloaded from [github releases](https://github.com/oneclick/rubyinstaller2/releases/tag/rubyinstaller-head).\nCheck the [wiki on how to use](https://github.com/oneclick/rubyinstaller2/wiki/For-gem-developers#user-content-appveyor) ruby-head versions for your CI builds.\n\n\n### Build RubyInstaller2 on your own machine:\n\n- Make sure you have a working RubyInstaller-2.4+ and Git installation\n- Ensure you have MSYS2 installed either by a RubyInstaller-Devkit version or per `ridk install` with default options\n- Install the latest Inno-Setup (unicode) from http://www.jrsoftware.org/isdl.php\n- Run **cmd.exe** and add **iscc.exe** to PATH:\n  ```sh\n    set PATH=%PATH%;\"c:\\Program Files (x86)\\Inno Setup 6\"\n  ```\n- Clone RubyInstaller2 and install dependencies:\n  ```sh\n    git clone https://github.com/oneclick/rubyinstaller2\n    cd rubyinstaller2\n    bundle install\n    rake -T\n  ```\n- The last command lists all available RubyInstaller build targets.\n  The build targets consists of the following parts:\n  ```\n    rake ri:ruby-3.4.1-x86-msvcrt:archive-7z\n          ^      ^      ^    ^        ^- \"archive-7z\"     =\u003e 7z archive of the rubyinstaller files\n          |      |      |    |           \"installer-inno\" =\u003e executable installer file\n          |      |      |    '------- \"msvcrt\" =\u003e older type of C standard library\n          |      |      |             \"ucrt\"   =\u003e new type of C standard library\n          |      |      '------- \"x86\" =\u003e 32 bit x86 ruby and MSYS2 version\n          |      |               \"x64\" =\u003e 64 bit x86_64 version\n          |      |               \"arm\" =\u003e ARM64 version\n          |      '------ \"x.x.x\" =\u003e ruby version to build\n          |              \"head\"  =\u003e latest development snapshot of ruby\n          '------ \"ri\"      =\u003e RubyInstaller without Devkit\n                  \"ri-msys\" =\u003e RubyInstaller with MSYS2 based Devkit\n  ```\n- Copy and paste the interesting one on the command line.\n- If everything works well, you will find the final setup and archive files like so:\n  * `packages/ri-msys/recipes/installer-inno/rubyinstaller-devkit-\u003cVERSION\u003e-\u003cARCH\u003e.exe`\n  * `packages/ri/recipes/archive-7z/rubyinstaller-\u003cVERSION\u003e-\u003cARCH\u003e.7z`\n\n\n## Known Issues\n\n- It's best to avoid installation into a PATH containing spaces or non-ASCII. Some gems won't install with spaces and older ruby versions (\u003c= 3.0.x) ridk won't even run then at all with special characters.\n- Also refer to [the issue list](https://github.com/oneclick/rubyinstaller2/issues).\n","funding_links":[],"categories":["Ruby"],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Foneclick%2Frubyinstaller2","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Foneclick%2Frubyinstaller2","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Foneclick%2Frubyinstaller2/lists"}