Package: luarocks
Version: 3.8.0+dfsg1-1
Severity: normal
Dear Maintainer,
"luarocks config rocks_servers" shows these default servers for LuaRocks
packages:
{
{
"https://luarocks.org";,
"https://raw.githubusercontent.com/rocks-moonscript-org/moonrocks-mirror/master/";,
"https://luafr.org/luarocks/";,
"http://luarocks.logiceditor.com/rocks";
}
}
Installed is version 3.8.0+dfsg1-1, the last version 3.8.0+dfsg1-2 has
the same. The source for this config is in the package itself
/usr/share/lua/5.*/luarocks/core/cfg.lua .
The problem is the server luafr.org. The domain has been discontinued
and belongs to a domain grabber now. Anybody can buy it and start
publishing Lua packages there now.
luafr.org was removed upstream here:
https://github.com/luarocks/luarocks/pull/1517
Also removed was luarocks.logiceditor.com, see
https://github.com/luarocks/luarocks/issues/1354
Those hosts should be remove in the Debian packages even for older
versions.
-- System Information:
Debian Release: 13.5
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 7.0.4+deb13-amd64 (SMP w/12 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages luarocks depends on:
ii liblua5.1-0-dev [liblua5.1-dev] 5.1.5-11
ii lua-any 33
ii lua5.1 5.1.5-11
ii unzip 6.0-29
ii wget 1.25.0-2
ii zip 3.0-15
Versions of packages luarocks recommends:
ii lua-sec 1.3.2-2+b2
luarocks suggests no packages.
-- no debconf information
