Do you plan to open source Gemcanary. Like Rubygems and Rubygems.org?

Yup. The most value we could provide, though, comes through the vulnerability feed which we'll compile and always provide for free.

very interesting! had same idea (parse gemfile.lock and follow changelogs). Waiting for proto

xcanary would be better... e.g. alerts on mysql, django, ubuntu... anything :)

One step at a time! We're going to start with bundler-enabled applications, but I see no reason why it couldn't be expanded to other communities.

could you please post link to xcanary? Google doesn't helps to find it :(

It doesn't exist yet. Gemcanary is the MVP.