Super impressed a gem installed with "HighSecurity" (it's signed, & so are all its dependencies).

Then I remembered I'd commented out all of its dependencies while I worked out what I could do away with.