Before installing a dependency. In May, RubyGems removed more than 500 malicious packages. Two questions to ask. A dependency to install. New and rarely downloaded? Does your registry filter by age? Not the standard. in its field. Ask the question. today. A dependency to install → New and rarely downloaded? (check). A dependency to install → Does your registry filter by age? (at work). New and rarely downloaded? → Not the standard (yes). Does your registry filter by age? → Ask the question (no).