The function would be "compile time" so that function would be evaluated when you call `lx add <dependency@version>`, I'd also assume that the previous configuration would be cached and a diff shown of dependencies.

But I would also accept that it would be a subset of Lua that could define tables, but not contain functions. The data only declarative sublanguage.