GNU ELPA vs LuaRocks
GNU ELPA
elpa.gnu.orgLuaRocks
luarocks.orgSide by side
| Figure | GNU ELPA | LuaRocks |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | Yes | — |
| Web | Yes | — |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | — | Yes |
| API | — | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 1 |
| Spec score · Package Registries | 8.6 (#8) | 8.7 (#7) |
| Dependency handling | Emacs automatically downloads required dependencies when installing a package, stopping if a required dependency is unavailable. | Rocks include version dependency information, which LuaRocks uses to install dependencies and load the appropriate module version. |
| Purpose | GNU ELPA is the default package repository for GNU Emacs. | LuaRocks is a package manager for Lua, and LuaRocks.org hosts rocks and rockspecs for Lua modules. |
| Security | The contribution page warns that a package can pose a security risk if its maintainer’s repository access is compromised. | A 2019 security incident page says LuaRocks.org packages did not have signing and verification at the time of that incident. |
| Support | The site directs users to report bugs with `M-x report-emacs-bug` and suggests the help-gnu-emacs mailing list for help. | The official site links to its GitHub issue tracker for reporting issues. |
Plans
In their own words
LuaRocks
LuaRocks is a package manager for Lua, with LuaRocks.org hosting rocks and rockspecs for Lua modules. Its command line uses manifests to find packages, choose a version and platform match, and install the corresponding files locally. Rocks carry version dependency information, which LuaRocks uses to install dependencies and load the appropriate module version. Package collections can be organized through the root manifest, per-user manifests, or custom manifests; development versions are kept in a separate manifest and are not installed by default. LuaRocks supports offline installation and platforms including Linux, macOS, Windows, Unix, FreeBSD, and Cygwin. Module authors can register and upload a rockspec, then publish rock files for a version; the current release supports the `luarocks upload` command. The application is described as pure Lua with no library dependencies, though its current release uses helper tools. LuaRocks is free, with a listed price of free.