ankane/chartkick

This system is the Chartkick library, a Ruby gem that provides helper methods for rendering various chart types such as line, pie, and bar charts. It integrates with the Chart.js JavaScript library to handle the actual visualization and supports modern web frameworks like Rails and Sinatra. The system ensures security compliance through Content Security Policy nonce support and manages asset delivery via importmaps and Sprockets.

The legacy \app/assets/javascripts/chartkick.js\ file has been removed. This file contained a custom, self-contained implementation of Chartkick that relied exclusively on Google Charts to render Line, Pie, and Column charts. Its removal indicates that the application no longer supports this specific bundled JavaScript library, likely shifting to a different charting solution or a newer version of the library managed elsewhere.

app/assets · high confidence

This update upgrades the Chartkick library to version 5.2.1, introducing significant changes to how charts are rendered and integrated. The helper methods now support Content Security Policy (CSP) nonces, automatically detecting and applying nonces from Rails 5.2+ or Secure Headers to script tags, which improves security compliance. Additionally, the engine has been updated to support importmap-rails by conditionally adding assets to the precompile list only when both Importmap and Sprockets are defined, while also adding new core extensions for JSON serialization and utility functions for deep merging and JSON escaping. The version bump reflects these structural and security enhancements.

lib/chartkick · high confidence

Chartkick now supports Sinatra applications in addition to Rails, with the Sinatra integration loaded only when the framework is detected. The library introduces global configuration options accessible via \Chartkick.options\ and a new \content\_for\ setting to control how JavaScript assets are rendered. Additionally, the initialization logic has been updated to safely include the helper module using \ActiveSupport.on\_load\, preventing exceptions if ActiveSupport is only partially loaded.

lib · high confidence

Added a new test suite (\test/chartkick\_test.rb\) covering the core chart helper methods (line, pie, column, bar, area, scatter, geo, timeline) and validating key behaviors such as data escaping to prevent XSS, option immutability, width/height validation, nonce injection, deferred loading deprecation, content\_for support, default options, automatic chart ID generation, and JSON serialization.

test · high confidence

The JavaScript build now uses Chart.js 4.5.1 (along with @kurkle/color 0.3.2, chartjs-adapter-date-fns 3.0.0, and date-fns 2.30.0) via a new build/package.json, replacing the previous bundling approach. On the Ruby side, the gemspec has been cleaned up to specify a single author and email, set the homepage to https://chartkick.com, restrict the required Ruby version to \>= 3.2, and move development dependencies (minitest, rake) into the Gemfile.

(dependencies) · high confidence

The build process now bundles Chart.js version 4.5.1 (along with @kurkle/color v0.3.2, chartjs-adapter-date-fns v3.0.0, and date-fns v2.30.0) into the vendor JavaScript file. This upgrade brings the latest features and fixes from the Chart.js 4.x series to the application's charting capabilities.

build · high confidence

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

• CAI 48 → 58 (+10.5)
• Rubric changed (rubric-2026.08.15 → rubric-2026.09.15) — scores are not directly comparable.

• Code Health 97 → 96 (-0.4)
• Architecture 69 → 69 (+0.0)
• Maturity 55 → 39 (-16.4)
• Readiness 26 → 70 (+43.8)
• Security 90 → 100 (+9.8)

• Coverage not measured — test suite did not build
• Dimension evaluation failed
• High: security finding (details withheld)
• High: security finding (details withheld)
• No exposed public API
• No tests found
• Scanner failed to run — not a clean result
• Test reliability not included

• Helper.chartkick_chart (cognitive 23) (lib/chartkick/helper.rb)
• Helper.chartkick_chart (cyclomatic 19) (lib/chartkick/helper.rb)
• High: security finding (details withheld)
• High: security finding (details withheld)
• No dependency advisory monitoring
• Scanner failed to run — not a clean result
• Scanner failed to run — not a clean result
• Workflow token permissions not restricted

• 1 commits — 1 feature/other, 0 fixes

• .github/workflows — 1 commit

• change: Updated checkout action [skip ci]

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

ankane/chartkick was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.