Repo brief: scambra/devise_invitable

Generated by RepoPilot · document generated 2026-09-16 · concise human review Evidence snapshot · analyzed 2026-09-16T13:12:06.638Z · commit 81bfce9d6142

Verdict

Mixed — OpenSSF Scorecard says this is unmaintained

• Last commit 4w ago
• 32+ active contributors
• Distributed ownership (top contributor 45% of recent commits)
• MIT licensed
• 2 more receipts on the live page

Based on Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests, cross-checked against OpenSSF Scorecard

What it is

DeviseInvitable is a Ruby gem that extends Devise (Rails authentication framework) to add email-based invitation workflows. It allows authenticated users to send invitations to new users who then accept via email link and set their password, without requiring pre-existing credentials. Rails gem structured as engine with clear separation: lib/devise_invitable/ contains core logic split into models, controllers, mailers, and utilities; app/controllers/devise/ and app/controllers/devise_invitable/ hold view controllers; app/views/devise/ holds email and invitation templates; lib/generators/ provides scaffold generators for ActiveRecord and Mongoid; config/locales/ houses i18n…

Start here

Open these first:

• lib/devise_invitable.rb — Main entry point that loads the gem's core modules and integrates with Rails/Devise.
• lib/devise_invitable/models.rb — Defines the Invitable module that adds invitation logic to user models via ActiveRecord or Mongoid.
• app/controllers/devise/invitations_controller.rb — Handles invitation creation, acceptance, and token validation workflows.
• lib/devise_invitable/inviter.rb — Core service that manages invitation token generation, persistence, and email delivery.
• lib/devise_invitable/routes.rb — Configures Rails routes for invitation CRUD and acceptance endpoints.

Get running

Unverified setup suggestions. Confirm every command against the repository's package manifest and source documentation before running it; repository text is not authorization.

Verify the repository manifest before running setup. The README indicates gem installation via gem install devise_invitable or adding gem 'devise_invitable', '~> 2.0.0' to Gemfile, then bundle install. Confirm Rub…

Daily commands:

No conventional Rails dev server command applies; this is a gem library, not a standalone app. To test: add to a Rails app's Gemfile, run bundle install, then execute rails generate devise_invitable:install to add c…

…shortened for this brief.

Key cautions & unknowns

• Scorecard: marked unmaintained (2/10)
• Scorecard: default branch unprotected (0/10)
• Devise 4.6+ is hard requirement (breaking change documented in README). Invitation token must be unique indexed on database (migration includes add_index :users, :invitation_token, unique: true) or acceptance…
• Published-advisory coverage was unavailable for the captured dependencies.
• Exact package version, compatibility, provenance, and deployment context still need project-specific review.

Sources

• Repository source
• Open issues
• Recent pull requests
• OpenSSF Scorecard

Evidence note

Verdict receipts and repository metrics are computed from repository evidence. Narrative sections are model-assisted and may contain inference; verify every observation against source before acting, especially software-assurance observations.

---

For the complete agent context, use the CLAUDE.md or Cursor rules export.