A issue about ./Gemfile.lock about academicpages.github.io HOT 2 CLOSED

I second. I got the similar warning.

We found potential security vulnerabilities in your dependencies.
Some of the dependencies defined in these manifest files have known security vulnerabilities and should be updated:

./Gemfile.lock 2 vulnerabilities found

How serious is this? Can we use this repo as the template safely?

from academicpages.github.io.

This is not serious for using GitHub pages, as it is being run on GitHub's servers, which ignore that configuration file and use their own. If you are serving it on your own server by running it locally on the command line, this could be an issue. Either way, delete the Gemfile.lock file entirely from your repo. The extra packages in Gemfile.lock are not needed, only the ones in Gemfile.

from academicpages.github.io.