LuaRocks.org had a security incident in September 2026. Read the incident report.

Find Lua code that looks public but is only used privately.

$ luarocks install privata

privata is a static checker for keeping module boundaries intentional. It
scans production Lua modules and reports interface drift: fields on a
module table that no other module reads, globals that should be locals,
requires of private modules from outside the package that owns them, reads
of another module's private names, and stale literal export tables.

Test usage does not confer publicity, so tests can reach internals without
pinning them public forever.

Zero runtime dependencies. Runs on Lua 5.1 through 5.4 and LuaJIT.

Versions

0.3.1-189 days ago46 downloads
0.3.0-190 days ago2 downloads
0.2.0-190 days ago13 downloads
0.1.0-190 days ago3 downloads

Dependencies

lua >= 5.1

Manifests