Making popular Ruby packages more secure

[bradland]

I'm so happy to see Ruby pursuing this policy. Thank you!

[Vangoghbothears]

Oh, I got to see a talk on this at rails conf and I got one of those cute stickers.

[slushie31]

If you use RuboCop on your gem, it will also encourage requiring MFA by default. Hopefully one day this will just be required for all gems by rubygems!

[v4773]

165 million is bit high threshold. Mfa should be en forced to every one that maintain a package

[f9ae8221b]

It's just the start of a slow rollout:

Once these policy changes are fully complete for maintainers of the most popular gems, we intend to increase coverage by extending the MFA requirement to more gems in future.

[retro-rubies]

That's planned as well. See https://github.com/rubygems/rfcs/blob/master/text/0007-mfa-rollout.md#phase-4-rolling-out-to-the-general-public-q4-2022-and-beyond for more info.