bundle-audit

Works without a network connection once the advisory database is updated, enabling security audits in isolated or secure environments, as stated in the features.

Supports JSON output and provides Rake tasks, allowing easy automation in continuous integration pipelines, as shown in the synopsis for command-line usage.

Enables ignoring specific advisories via command-line flags or YAML configuration files, offering customization for project-specific needs, as detailed in the configuration section.

Prioritizes essential security auditing without unnecessary complexity, aligning with its philosophy of reliability and unobtrusiveness in development workflows.