diff --git a/lib/lua/README.md b/lib/lua/README.md
new file mode 100644
index 000000000..b82e4a652
--- /dev/null
+++ b/lib/lua/README.md
@@ -0,0 +1,6 @@
+## Lua 5.1.5 source
+
+This copy has been patched with Minetest-specific changes (`lua_atccall`)
+so it is *not* interchangeable with upstream PUC Lua.
+
+A patch for CVE-2014-5461 has been applied.