[revorad]

Thanks for this. So I ran this and found a bunch of unsafe gems. Do I report them to each gem author or to RubyGems security?

[dcu]

I think we should ask the gem owner to verify that everything is ok unless there's a new version. I updated the script to report if there is a new safe version available.

[davidradcliffe]

In this context "unsafe" only means not 100% verified.