Building a baseline JIT for Lua automatically

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com

Our great sponsors
  • WorkOS - The modern identity platform for B2B SaaS
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • SaaSHub - Software Alternatives and Reviews
  • LuaJIT

    Mirror of the LuaJIT git repository

    I am using https://luajit.org/ in my GCC C++ project.

    Can I use this faster Lua JIT in my project as a replacement? And if so, how so?

    The existing luajit doesn't do v5.1, so it would be nice to use this newer engine at the newer baseline lua version level.

  • luau

    A fast, small, safe, gradually typed embeddable scripting language derived from Lua

    As far as I can tell, they aren't.

    http://lua-users.org/wiki/SandBoxes

    There is a lot of information there, but it doesn't handle resource exhaustion, execution time limits or give any guarantees. It does indicate that it's possible, and has a decent example of the most restrictive setup, which is a good start. But I would for example compare it with Luau's SECURITY.md.

    From https://github.com/luau-lang/luau/blob/master/SECURITY.md:

    > Luau provides a safe sandbox that scripts can not escape from, short of vulnerabilities in custom C functions exposed by the host. This includes the virtual machine and builtin libraries. Notably this currently does not include the work-in-progress native code generation facilities.

    > Any source code can not result in memory safety errors or crashes during its compilation or execution. Violations of memory safety are considered vulnerabilities.

    > Note that Luau does not provide termination guarantees - some code may exhaust CPU or RAM resources on the system during compilation or execution.

    So, even luau will have trouble with untrusted code, but it specifies exactly what happens and so on. I think that's fair enough.

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts