Is Prometheus Client Mmap Safe?
Use Prometheus Client Mmap with some caution. Prometheus Client Mmap is a Ruby gem with a Nerq Trust Score of 68.2/100 (B-), based on 3 independent data dimensions. It is below the recommended threshold of 70. Security: 90/100. Popularity: 100/100. Data sourced from rubygems.org, GitHub, and NVD. Last updated: 2026-03-29. Machine-readable data (JSON).
Is Prometheus Client Mmap safe?
CAUTION — Prometheus Client Mmap has a Nerq Trust Score of 68.2/100 (B-). It has moderate trust signals but shows some areas of concern that warrant attention. Suitable for development use — review security and maintenance signals before production deployment.
Trust Score Breakdown
Key Findings
Details
| Author | Tobias Schmidt, Paweł Chojnacki, Stan Hu |
| Category | gems |
| Source | N/A |
Safety Guide: Prometheus Client Mmap
What is Prometheus Client Mmap?
Prometheus Client Mmap is a Ruby gem — A suite of instrumentation metric primitives that can be exposed through a web services interface..
How to Verify Safety
Run bundle audit. Review on rubygems.org.
You can also check the trust score via API: GET /v1/preflight?target=prometheus-client-mmap
Key Safety Concerns for Ruby gems
When evaluating any Ruby gem, watch for: dependency vulnerabilities, maintenance status.
Trust Assessment
Prometheus Client Mmap has a Nerq Trust Score of 68/100 (B-) and has not yet reached Nerq trust threshold (70+). This score is based on automated analysis of security, maintenance, community, and quality signals.
Key Takeaways
- Prometheus Client Mmap has a Trust Score of 68/100 (B-).
- Review carefully before use — below trust threshold.
- Always verify independently using the Nerq API.
Frequently Asked Questions
Is Prometheus Client Mmap safe to use?
What is Prometheus Client Mmap's trust score?
What are safer alternatives to Prometheus Client Mmap?
Does Prometheus Client Mmap have known vulnerabilities?
How actively maintained is Prometheus Client Mmap?
Popular in gems
Disclaimer: Nerq trust scores are automated assessments based on publicly available signals. They are not endorsements or guarantees. Always conduct your own due diligence.