LuaRocks vs Packagist
LuaRocks
luarocks.orgPackagist
packagist.orgSide by side
| Figure | LuaRocks | Packagist |
|---|---|---|
| Price from | Free | €2,500/mo |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | — | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | — |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 1 | 4 |
| Spec score · Package Registries | 8.7 (#7) | 8.0 (#13) |
| Purpose | LuaRocks is a package manager for Lua, and LuaRocks.org hosts rocks and rockspecs for Lua modules. | Packagist is the default Composer package repository, helping users find packages and telling Composer where to get their code. |
| Security | A 2019 security incident page says LuaRocks.org packages did not have signing and verification at the time of that incident. | The site says Packagist.org package metadata is hosted on Bunny.net's global CDN. |
| Support | The official site links to its GitHub issue tracker for reporting issues. | Commercial support and consulting for PHP dependency management with Packagist and Composer are available through Private Packagist subscription plans. |
Plans
Packagist
- Packagist.orgFree
- Bronze sponsorship€2,500 a month
- Silver sponsorship€5,000 a month
- Gold sponsorship€8,000 a month
In their own words
LuaRocks
LuaRocks is a package manager for Lua, with LuaRocks.org hosting rocks and rockspecs for Lua modules. Its command line uses manifests to find packages, choose a version and platform match, and install the corresponding files locally. Rocks carry version dependency information, which LuaRocks uses to install dependencies and load the appropriate module version. Package collections can be organized through the root manifest, per-user manifests, or custom manifests; development versions are kept in a separate manifest and are not installed by default. LuaRocks supports offline installation and platforms including Linux, macOS, Windows, Unix, FreeBSD, and Cygwin. Module authors can register and upload a rockspec, then publish rock files for a version; the current release supports the `luarocks upload` command. The application is described as pure Lua with no library dependencies, though its current release uses helper tools. LuaRocks is free, with a listed price of free.
Packagist
Packagist is the default Composer package repository for PHP developers. It helps them discover public packages and tells Composer where to retrieve the code. To publish, a user submits a public repository URL, which Packagist checks periodically. New versions are gathered from repository tags, while branches are shown as development versions. Hooks or webhooks from GitHub, Bitbucket, GitLab, and Gitea can trigger automatic package updates. The API supports searching and listing packages, retrieving package data, and viewing download statistics, among other operations. Many endpoints can be used anonymously; authenticated ones accept bearer tokens or a username and API token. Packagist.org is free to publish open-source PHP packages. The maker says stable versions cannot be silently replaced with different code. The service is for public packages, and users seeking to share private code are directed to Private Packagist. Packagist Conductors GmbH, registered in Berlin, says it has operated Packagist.org since its creation in 2012. Separate sponsorship plans are available at 2500.00 EUR, 5000.00 EUR, and €8,000 a month, each with an annual commitment.