Side by side
bundler-audit vs DeepSource
Both stand on ruby static analysis tools. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free plan LinuxMac
bundler-audit focuses on lockfile checks for Ruby and Bundler projects, with offline use, advisory controls and Rake tasks. Users should check the listed runtime requirements and platform coverage before adopting it.
Visit bundler-audit
Free plan APILinuxMac+3
DeepSource combines pull request review with security scans and code-coverage thresholds. Compare the free tier’s monthly allowances with your review volume, and note the annual billing on Team.
Visit DeepSourceThe facts
| bundler-audit | DeepSource | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | No |
| Runs on | Linux, Mac | API, Linux, Mac, Self-hosted, Web, Windows |
| Lowest paid plan | Free or on request | Team: $30 a month |
| Plans published | 1 | 7 |
| Maker | Not published | Not published |
| Website | github.com | deepsource.com |
| On ruby static analysis tools | #3 of 21 | #1 of 21 |
bundler-audit: what it does well
- Checks Gemfile.lock for vulnerable gem versions.
- Flags http:// and git:// gem sources.
- Can run without a network connection.
- Supports JSON output and per-project ignored-advisory settings.
- Free software under GPL version 3 or later.
What to know first
- Requires Ruby 2.0.0 or newer and listed dependencies.
- Listed platforms are Linux and macOS.
- The project does not state a support service.
DeepSource: what it does well
- Reviews use over 5,000 deterministic rules and an AI agent.
- Autofix offers verified, pre-generated patches for many issues.
- Free tier includes unlimited public repositories and members.
- Enterprise offers self-hosted and airgapped deployment.
What to know first
- Free-tier pull request reviews are limited to 1,000 monthly.
- Free-tier formatting runs are limited to 1,000 monthly.
- GraphQL API limit is 5,000 requests per hour per user.
- Enterprise pricing is custom.
Alternatives to bundler-audit Alternatives to DeepSource The whole list