---
id: gemfileparser2
version: "0.9.4"
license: GPL-3.0-or-later OR MIT
license_treatment: copyleft
maintenance: dormant
---

# gemfileparser2 — Parse Ruby Gemfile, .gemspec and Cocoapod .podspec files using Python.

License: copyleft · Maintenance: dormant · Downloads: 123.0K/mo

## What it is and what it does

gemfileparser2 is a Python library that reads and parses Ruby dependency manifests—Gemfiles, .gemspec files, and Cocoapod .podspec files—extracting structured dependency information. It returns a dictionary keyed by dependency group (development, runtime, etc.), with each dependency represented as an object containing name, version requirement, source URL, parent gem, and group membership. The package has no external runtime dependencies, making it lightweight to integrate into Python tooling that needs to analyze Ruby project metadata.

This is a maintained fork of an inactive upstream project. It targets developers building dependency analysis tools, supply-chain auditing systems, or polyglot build orchestration that must understand Ruby project structure from a Python environment. The library supports current Python versions (3.7+) and is classified as Production/Stable, though the repository shows dormant maintenance—no releases since August 2024.

Use it for:

- Audit Ruby project dependencies as part of a Python-based supply-chain security scanner
- Extract gem versions from Gemfiles to populate a dependency inventory or bill-of-materials
- Build a polyglot dependency resolver that handles both Python and Ruby projects
- Parse .podspec files to analyze Cocoapod dependencies in a unified Python workflow
- Validate Gemfile syntax and dependency structure in CI/CD pipelines written in Python

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Parses Ruby Gemfiles, .gemspec files, and Cocoapod .podspec files from Python, extracting dependency information organized by group.

Yes, if you need to parse Ruby dependency files from Python and accept dormant maintenance. The package is lightweight (no runtime deps), dual-licensed flexibly, and stable enough for production use. However, verify that it handles your target Ruby syntax versions and that dormancy (last release August 2024, last commit September 2024) does not signal abandonment risk for your use case.

## Install

pip install gemfileparser2
uv add gemfileparser2
poetry add gemfileparser2

## Installing gemfileparser2

Before you install: Low friction install with no runtime dependencies. Maintenance is dormant—last release was 2024-08-21 and last commit 2024-09-16, but the repository is not archived and the package is marked Production/Stable.

License in practice: Dual-licensed under GPL-3.0-or-later or MIT at your choice. The license is copyleft; derivative works should respect the GPL-3+ license, though MIT is available as an alternative.

Quickstart:

from gemfileparser2 import GemfileParser
parser = GemfileParser('Gemfile', 'project_name')
deps = parser.parse()
for group, dependencies in deps.items():
    for dep in dependencies:
        print(dep.name, dep.requirement)

Requires Python >= 3.7

Verify before relying:

- Whether the fork remains actively maintained or if dormancy signals end-of-life risk
- Compatibility with recent Ruby versions and Gemfile syntax changes
- Performance characteristics on large or complex Gemfiles

## Package facts

- License: GPL-3.0-or-later OR MIT (copyleft)
- Python support: supports_current
- Install friction: low
- Maintenance: dormant
- Downloads: 123.0K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

parse ruby gemfile python, gemfile dependency parser, ruby gem parser, gemspec parser, cocoapod podspec parser, ruby dependency extractor, gemfile analysis, ruby-interop, dependency-parsing, polyglot-tooling

[View on SkillFed](https://skillfed.io/packages/gemfileparser2) · [View on PyPI](https://pypi.org/project/gemfileparser2/)