[1qaz2wsx3edc]

Gems are unsigned. Patching from a different source is idiotic. Do not use: you have no clue who is the owner.

[amalag]

Not so idiotic if you know the owner. It is done by Heroku's Ruby team

http://hone.heroku.com/bundler%20heroku/2012/10/22/rubygems-...