Dear Maintainer,

I was checking if your are affected by a lua security bug. It will be nice if
you could strip (repack with +ds suffix) third party library.

It is a good pratice to not ship third party library when you use system
library:
- in case of security bug it is less work (no need to check build log)
- do not introduce accidental compilation of third party library in case of
upstream modification.

Rouca

I was looking into this for ardour8, only to discover that ardour upstream
patches the lua engine to work around garbage collection issues in a realtime
context like ardour.

So: I'm afraid that i will not be able to drop the embedded lua library for now.

we will have to re-investigate once upstream switches to a newer lua version.

thanks