Credential access
Reads environment variables, server credentials, and local package config.
brew
Package manager for the Lua programming language. Version 3.13.0 via Homebrew; verified from local package data.
agent safety
luarocks manages Lua packages and can install or publish project dependencies.
Reads environment variables, server credentials, and local package config.
Can install packages and interact with package servers.
Can publish Lua rocks and generated package artifacts.
Gate upload, install scripts, and credentialed server operations.
Allow dependency queries; require approval for package publication and secret-backed actions.
install
brew install luarockslocal Homebrew formula metadata
sudo apk add luarocksAlpine Linux edge package indexes · luarocks · source: dl-cdn.alpinelinux.org
sudo apt install luarocksDebian stable package indexes · luarocks · source: deb.debian.org
sudo dnf install luarocksFedora Rawhide package metadata · luarocks · source: dl.fedoraproject.org
nix profile install nixpkgs#luarocksnixpkgs package indexes · luarocks · source: raw.githubusercontent.com
sudo pacman -S luarocksArch Linux sync databases · luarocks · source: geo.mirror.pkgbuild.com
choco install luarocksChocolatey community package catalog · luarocks · source: community.chocolatey.org
scoop install main/luarocksScoop official bucket manifest trees · bucket/luarocks.json · source: api.github.com
overview
Package manager for the Lua programming language
history
LuaRocks is the package manager and public package repository system for Lua modules. It introduced the rockspec-centered workflow that lets Lua packages declare metadata, dependencies, sources, and build rules in Lua.
The LuaRocks project describes itself as the package manager for the Lua programming language. Its repository README and wiki say it installs modules as self-contained packages called rocks and supports local and remote repositories plus multiple local rocks trees.
LuaRocks' documentation centers on the rockspec: a Lua metadata file that tells the tool how to fetch, build, and install a package. This design made LuaRocks both a package installer and a lightweight build/publishing convention for Lua modules, including modules with native C extensions.
LuaRocks became the default package-distribution culture for much of Lua outside application-specific ecosystems. The official site surfaces recent modules, labels, weekly download counts, root manifests, custom manifests, mirrors, and upload flows, showing that LuaRocks is both a CLI and the central package index.
The input metadata shows broad OS package coverage: LuaRocks is available through Homebrew, MacPorts, Debian, Ubuntu, Fedora, Alpine, Arch, Nix, Scoop, and Chocolatey. That matters because Lua projects often need LuaRocks before they can install testing tools, web frameworks, OpenResty libraries, or native-binding modules.
The command-line interface is luarocks. It supports installing, building, packing, uploading, searching, showing, removing, testing, and configuring rocks, and can operate against selected servers, trees, and dependency modes.
Package authors write a rockspec, tag or publish their source, and submit or upload the rockspec. LuaRocks can build from source, make from a local checkout, pack source or binary rocks, and publish artifacts that users install without needing the original source-control tool.
LuaRocks is central package-nerd infrastructure for Lua because it defines the names, versions, build metadata, binary/source artifact formats, and repository manifests that other tools consume. It is the closest analogue to npm, RubyGems, or CPAN for Lua, but with Lua-specific details such as Lua-version-specific trees and native module paths.
It is also historically important because it works across stock Lua and LuaJIT ecosystems. That cross-runtime support, plus package-manager availability on Unix and Windows, made it the practical bootstrap path for Lua dependency management.
security posture
generalized runtime or code generation signal. infrastructure mutation or orchestration signal.
orange risk · medium confidence · infrastructure
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
$XDG_CONFIG_HOME/luarocks/upload_config.lua~/.config/luarocks/upload_config.lua~/.luarocks/upload_config.luaCredential-bearing paths to review before unattended agent runs.
$XDG_CONFIG_HOME/luarocks/upload_config.lua~/.config/luarocks/upload_config.lua~/.luarocks/upload_config.luaexecutables
| Command | Kind | Exposure | Note |
|---|---|---|---|
luarocks | cli | global executable | |
luarocks-admin | cli | global executable |
freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
install metadata
| Package key | brew:luarocks |
|---|---|
| Version | 3.13.0 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/luarocks |
| Homepage | https://luarocks.org/ |
| Repository | https://github.com/luarocks/luarocks |
| Upstream docs | https://luarocks.org/docs |
| License | MIT |
| Source archive | https://luarocks.org/releases/luarocks-3.13.0.tar.gz |
| Dependencies | lua |
| Uses from macOS | unzip |
| Bottle | available (on all) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | luarocks |
| Version Scheme | 0 |
| Revision | 1 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
luarocks 3.8.0+dfsg1-1
deployment and management system for Lua modules
sudo apt install luarocksluarocks
nix profile install nixpkgs#luarocksluarocks 3.8.0+dfsg1-1
deployment and management system for Lua modules
sudo apt install luarocksluarocks 3.12.2-r1
Deployment and management system for Lua modules
sudo apk add luarocksluarocks5.1 3.12.2-r1
Deployment and management system for Lua 5.1 modules
sudo apk add luarocks5.1luarocks5.2 3.12.2-r1
Deployment and management system for Lua 5.2 modules
sudo apk add luarocks5.2luarocks5.3 3.12.2-r1
Deployment and management system for Lua 5.3 modules
sudo apk add luarocks5.3luarocks5.4 3.12.2-r1
Deployment and management system for Lua 5.4 modules
sudo apk add luarocks5.4luarocks 3.13.0-2.fc45
A deployment and management system for Lua modules
sudo dnf install luarocksluarocks 3.13.0-5
Deployment and management system for Lua modules
sudo pacman -S luarocksluarocks
choco install luarocksmain/luarocks
scoop install main/luarockssource trail
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
View the package source record on GitHub.