Credential-Zugriff
Reads environment variables, server credentials, and local package config.
brew
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für luarocks in AI-Agent-Workflows.
Agent-Sicherheit
luarocks manages Lua packages and can install or publish project dependencies.
Reads environment variables, server credentials, and local package config.
Can install packages and interact with package servers.
Can publish Lua rocks and generated package artifacts.
Gate upload, install scripts, and credentialed server operations.
Allow dependency queries; require approval for package publication and secret-backed actions.
Installation
brew install luarockslocal Homebrew formula metadata
sudo apk add luarocksAlpine Linux edge package indexes · luarocks · Quelle: dl-cdn.alpinelinux.org
sudo apt install luarocksDebian stable package indexes · luarocks · Quelle: deb.debian.org
sudo dnf install luarocksFedora Rawhide package metadata · luarocks · Quelle: dl.fedoraproject.org
nix profile install nixpkgs#luarocksnixpkgs package indexes · luarocks · Quelle: raw.githubusercontent.com
sudo pacman -S luarocksArch Linux sync databases · luarocks · Quelle: geo.mirror.pkgbuild.com
choco install luarocksChocolatey community package catalog · luarocks · Quelle: community.chocolatey.org
scoop install main/luarocksScoop official bucket manifest trees · bucket/luarocks.json · Quelle: api.github.com
Überblick
Package manager for the Lua programming language
Verlauf
LuaRocks is the package manager and public package repository system for Lua modules. It introduced the rockspec-centered workflow that lets Lua packages declare metadata, dependencies, sources, and build rules in Lua.
The LuaRocks project describes itself as the package manager for the Lua programming language. Its repository README and wiki say it installs modules as self-contained packages called rocks and supports local and remote repositories plus multiple local rocks trees.
LuaRocks' documentation centers on the rockspec: a Lua metadata file that tells the tool how to fetch, build, and install a package. This design made LuaRocks both a package installer and a lightweight build/publishing convention for Lua modules, including modules with native C extensions.
LuaRocks became the default package-distribution culture for much of Lua outside application-specific ecosystems. The official site surfaces recent modules, labels, weekly download counts, root manifests, custom manifests, mirrors, and upload flows, showing that LuaRocks is both a CLI and the central package index.
The input metadata shows broad OS package coverage: LuaRocks is available through Homebrew, MacPorts, Debian, Ubuntu, Fedora, Alpine, Arch, Nix, Scoop, and Chocolatey. That matters because Lua projects often need LuaRocks before they can install testing tools, web frameworks, OpenResty libraries, or native-binding modules.
The command-line interface is luarocks. It supports installing, building, packing, uploading, searching, showing, removing, testing, and configuring rocks, and can operate against selected servers, trees, and dependency modes.
Package authors write a rockspec, tag or publish their source, and submit or upload the rockspec. LuaRocks can build from source, make from a local checkout, pack source or binary rocks, and publish artifacts that users install without needing the original source-control tool.
LuaRocks is central package-nerd infrastructure for Lua because it defines the names, versions, build metadata, binary/source artifact formats, and repository manifests that other tools consume. It is the closest analogue to npm, RubyGems, or CPAN for Lua, but with Lua-specific details such as Lua-version-specific trees and native module paths.
It is also historically important because it works across stock Lua and LuaJIT ecosystems. That cross-runtime support, plus package-manager availability on Unix and Windows, made it the practical bootstrap path for Lua dependency management.
Sicherheitslage
generalized runtime or code generation signal. infrastructure mutation or orchestration signal.
orange Risiko · mittel Konfidenz · infrastructure
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
$XDG_CONFIG_HOME/luarocks/upload_config.lua~/.config/luarocks/upload_config.lua~/.luarocks/upload_config.luaCredential-bearing paths to review before unattended agent runs.
$XDG_CONFIG_HOME/luarocks/upload_config.lua~/.config/luarocks/upload_config.lua~/.luarocks/upload_config.luaExecutables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
luarocks | cli | globales Executable | |
luarocks-admin | cli | globales Executable |
Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
Installationsmetadaten
| Paketschlüssel | brew:luarocks |
|---|---|
| Version | 3.13.0 |
| Paketmanager | Homebrew |
| Paketmanager-Seite | https://formulae.brew.sh/formula/luarocks |
| Homepage | https://luarocks.org/ |
| Repository | https://github.com/luarocks/luarocks |
| Upstream-Dokumentation | https://luarocks.org/docs |
| Lizenz | MIT |
| Quellarchiv | https://luarocks.org/releases/luarocks-3.13.0.tar.gz |
| Abhängigkeiten | lua |
| Von macOS bereitgestellte Bibliotheken | unzip |
| Bottle | verfügbar (auf all) |
| Homebrew post-install | nicht definiert |
| Dienst | keiner deklariert |
Registry-Fakten
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | luarocks |
| Version Scheme | 0 |
| Revision | 1 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
Source-Datenbank-Treffer
Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.
luarocks 3.8.0+dfsg1-1
deployment and management system for Lua modules
sudo apt install luarocksluarocks
nix profile install nixpkgs#luarocksluarocks 3.8.0+dfsg1-1
deployment and management system for Lua modules
sudo apt install luarocksluarocks 3.12.2-r1
Deployment and management system for Lua modules
sudo apk add luarocksluarocks5.1 3.12.2-r1
Deployment and management system for Lua 5.1 modules
sudo apk add luarocks5.1luarocks5.2 3.12.2-r1
Deployment and management system for Lua 5.2 modules
sudo apk add luarocks5.2luarocks5.3 3.12.2-r1
Deployment and management system for Lua 5.3 modules
sudo apk add luarocks5.3luarocks5.4 3.12.2-r1
Deployment and management system for Lua 5.4 modules
sudo apk add luarocks5.4luarocks 3.13.0-2.fc45
A deployment and management system for Lua modules
sudo dnf install luarocksluarocks 3.13.0-5
Deployment and management system for Lua modules
sudo pacman -S luarocksluarocks
choco install luarocksmain/luarocks
scoop install main/luarocksQuellspur
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
View the package source record on GitHub.