Automic VaultAutomic Vault

brew

Install luarocks with Homebrew, apk, chocolatey, apt, dnf, Nix, pacman, scoop

Package manager for the Lua programming language. Version 3.13.0 via Homebrew; verified from local package data.

agent safety

Agent safety answer

luarocks manages Lua packages and can install or publish project dependencies.

Credential access

Reads environment variables, server credentials, and local package config.

Remote mutation

Can install packages and interact with package servers.

Publish/artifact risk

Can publish Lua rocks and generated package artifacts.

Recommended control

Gate upload, install scripts, and credentialed server operations.

Agent-use guidance

Allow dependency queries; require approval for package publication and secret-backed actions.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install luarocks

local Homebrew formula metadata

Linux

Alpine Linux apkverified · 92%
sudo apk add luarocks

Alpine Linux edge package indexes · luarocks · source: dl-cdn.alpinelinux.org

Debian aptverified · 92%
sudo apt install luarocks

Debian stable package indexes · luarocks · source: deb.debian.org

Fedora dnfverified · 92%
sudo dnf install luarocks

Fedora Rawhide package metadata · luarocks · source: dl.fedoraproject.org

Nixverified · 92%
nix profile install nixpkgs#luarocks

nixpkgs package indexes · luarocks · source: raw.githubusercontent.com

Arch Linux pacmanverified · 92%
sudo pacman -S luarocks

Arch Linux sync databases · luarocks · source: geo.mirror.pkgbuild.com

Windows

Chocolateyverified · 92%
choco install luarocks

Chocolatey community package catalog · luarocks · source: community.chocolatey.org

Scoopverified · 92%
scoop install main/luarocks

Scoop official bucket manifest trees · bucket/luarocks.json · source: api.github.com

overview

Package summary

Package manager for the Lua programming language

Commands and aliases

  • luarocks
  • luarocks-admin

history

Project history and usage

LuaRocks is the package manager and public package repository system for Lua modules. It introduced the rockspec-centered workflow that lets Lua packages declare metadata, dependencies, sources, and build rules in Lua.

Project history

The LuaRocks project describes itself as the package manager for the Lua programming language. Its repository README and wiki say it installs modules as self-contained packages called rocks and supports local and remote repositories plus multiple local rocks trees.

LuaRocks' documentation centers on the rockspec: a Lua metadata file that tells the tool how to fetch, build, and install a package. This design made LuaRocks both a package installer and a lightweight build/publishing convention for Lua modules, including modules with native C extensions.

Adoption history

LuaRocks became the default package-distribution culture for much of Lua outside application-specific ecosystems. The official site surfaces recent modules, labels, weekly download counts, root manifests, custom manifests, mirrors, and upload flows, showing that LuaRocks is both a CLI and the central package index.

The input metadata shows broad OS package coverage: LuaRocks is available through Homebrew, MacPorts, Debian, Ubuntu, Fedora, Alpine, Arch, Nix, Scoop, and Chocolatey. That matters because Lua projects often need LuaRocks before they can install testing tools, web frameworks, OpenResty libraries, or native-binding modules.

How it is used

The command-line interface is luarocks. It supports installing, building, packing, uploading, searching, showing, removing, testing, and configuring rocks, and can operate against selected servers, trees, and dependency modes.

Package authors write a rockspec, tag or publish their source, and submit or upload the rockspec. LuaRocks can build from source, make from a local checkout, pack source or binary rocks, and publish artifacts that users install without needing the original source-control tool.

Why package nerds care

LuaRocks is central package-nerd infrastructure for Lua because it defines the names, versions, build metadata, binary/source artifact formats, and repository manifests that other tools consume. It is the closest analogue to npm, RubyGems, or CPAN for Lua, but with Lua-specific details such as Lua-version-specific trees and native module paths.

It is also historically important because it works across stock Lua and LuaJIT ecosystems. That cross-runtime support, plus package-manager availability on Unix and Windows, made it the practical bootstrap path for Lua dependency management.

Timeline

  • 2000s: LuaRocks emerges as Lua's rockspec-based package manager.
  • 2010s: Development and distribution consolidate around the GitHub repository and luarocks.org.
  • 2020s: Documentation moves from the GitHub wiki into the repository docs folder.
  • 2026: GitHub lists LuaRocks 3.13.0 as the latest release, dated Jan 28, 2026.

Related projects

  • Lua is the language ecosystem LuaRocks packages target.
  • LuaJIT is a common LuaRocks runtime target and package dependency.
  • OpenResty libraries such as lua-resty modules are commonly distributed through LuaRocks.

security posture

Risk level: orange

generalized runtime or code generation signal. infrastructure mutation or orchestration signal.

Risk classifier

orange risk · medium confidence · infrastructure

Why

  • generalized runtime or code generation signal
  • infrastructure mutation or orchestration signal

Signals

  • text:package manager
  • text:programming language

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 1 platform targets.
  • Installs with 1 runtime dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
$XDG_CONFIG_HOME/luarocks/upload_config.lua~/.config/luarocks/upload_config.lua~/.luarocks/upload_config.lua

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
$XDG_CONFIG_HOME/luarocks/upload_config.lua~/.config/luarocks/upload_config.lua~/.luarocks/upload_config.lua

executables

Installed executables

CommandKindExposureNote
luarockscliglobal executable
luarocks-admincliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version3.13.0
manager updated
local dataok
upstreamnot checked
latest detectednot detected

https://luarocks.org/

  • infoNo package-manager update timestamp was available.low confidence
  • infoRelease/tag comparison is only available for GitHub repositories.https://luarocks.org/none confidence

install metadata

Package metadata

Package keybrew:luarocks
Version3.13.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/luarocks
Homepagehttps://luarocks.org/
Repositoryhttps://github.com/luarocks/luarocks
Upstream docshttps://luarocks.org/docs
LicenseMIT
Source archivehttps://luarocks.org/releases/luarocks-3.13.0.tar.gz
Dependencieslua
Uses from macOSunzip
Bottleavailable (on all)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameluarocks
Version Scheme0
Revision1
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Debian apt95%

luarocks 3.8.0+dfsg1-1

deployment and management system for Lua modules

https://luarocks.org/

sudo apt install luarocks
  • Section: interpreters
  • Architecture: all
  • 10 dependencies
  • 1 optional deps
  • normalized package name match
  • Matched by: Luarocks
Debian stable package indexes · deb.debian.org · Debian stable package indexes: luarocks from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

luarocks

nix profile install nixpkgs#luarocks
  • normalized package name match
  • Matched by: Luarocks
nixpkgs package indexes · raw.githubusercontent.com · nixpkgs package indexes: luarocks from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix
Ubuntu apt95%

luarocks 3.8.0+dfsg1-1

deployment and management system for Lua modules

https://luarocks.org/

sudo apt install luarocks
  • Section: universe/interpreters
  • Architecture: all
  • 10 dependencies
  • 1 optional deps
  • normalized package name match
  • Matched by: Luarocks
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: luarocks from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

luarocks 3.12.2-r1

Deployment and management system for Lua modules

https://luarocks.org/

sudo apk add luarocks
  • License: MIT
  • Architecture: x86_64
  • Source Package: luarocks
  • 1 dependencies
  • normalized package name match
  • Matched by: Luarocks
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: luarocks from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

luarocks5.1 3.12.2-r1

Deployment and management system for Lua 5.1 modules

https://luarocks.org/

sudo apk add luarocks5.1
  • License: MIT
  • Architecture: x86_64
  • Source Package: luarocks
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Luarocks
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: luarocks5.1 from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

luarocks5.2 3.12.2-r1

Deployment and management system for Lua 5.2 modules

https://luarocks.org/

sudo apk add luarocks5.2
  • License: MIT
  • Architecture: x86_64
  • Source Package: luarocks
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Luarocks
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: luarocks5.2 from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

luarocks5.3 3.12.2-r1

Deployment and management system for Lua 5.3 modules

https://luarocks.org/

sudo apk add luarocks5.3
  • License: MIT
  • Architecture: x86_64
  • Source Package: luarocks
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Luarocks
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: luarocks5.3 from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

luarocks5.4 3.12.2-r1

Deployment and management system for Lua 5.4 modules

https://luarocks.org/

sudo apk add luarocks5.4
  • License: MIT
  • Architecture: x86_64
  • Source Package: luarocks
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Luarocks
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: luarocks5.4 from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

luarocks 3.13.0-2.fc45

A deployment and management system for Lua modules

http://luarocks.org

sudo dnf install luarocks
  • License: MIT
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: luarocks
  • 5 dependencies
  • 2 provides
  • normalized package name match
  • Matched by: Luarocks
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: luarocks from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
pacman95%

luarocks 3.13.0-5

Deployment and management system for Lua modules

https://luarocks.org/

sudo pacman -S luarocks
  • License: custom
  • Architecture: any
  • 6 dependencies
  • 5 optional deps
  • normalized package name match
  • Matched by: Luarocks
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: luarocks from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
Chocolatey95%

luarocks

choco install luarocks
  • normalized package name match
  • Matched by: Luarocks
Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: luarocks from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','librespeed-cli'
Scoop95%

main/luarocks

scoop install main/luarocks
  • normalized package name match
  • Matched by: Luarocks
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/luarocks.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated agent safety answer
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment