Since a couple weeks VersionEye shows security issues for PHP projects. Now this feature works the same way for NodeJS and Ruby packages. If VersionEye is monitoring a Gemfile for you, then you will see the “Security” tab in the project view. Just like here in this example.
In the “Security” tab all known security vulnerabilities are listed for your 3rd party dependencies. If there is a security issue the dependency badge turns red! By clicking on the package name the package detail page comes up with a more detailed description of the security vulnerability.
On the detail the page a detailed description of the security vulnerability shows up and a link to the original source. That way it’s easy to reproduce the security vulnerability.
Now there is now reason not to use VersionEye. You get notifications about:
- out-dated dependencies
- license violations
- security vulnerabilities
This feature is pretty new, but already good tested through the PHP community. Your feedback is anyway welcome either here in the comments or on Twitter.
Open Source License Compliance & Security 
Hi Robert, thanks for this amazing post as I am a ruby developer and this security alert in my ruby gems will work good for me.
You are welcome. Let me know if you have any questions or suggestions to this feature.