@embroider/macros No license 51 versions

@embroider/macros

npm Repository Homepage

51

Versions

—

License

No

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

nullvoxpopulisimonihmigef4rwjbluekatiegenglerreal_ate

Keywords

ember-addon

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
provenance	publisher-changed	AI (provenance): Transition from ef4 to GitHub Actions is consistent with CI/CD automation; SLSA provenance attestation confirms integrity.	ai	2026/05/02
publish-pattern	dormant-publish	AI (publish-pattern): Dormancy followed by CI/CD-attested publish in an established monorepo package; no malicious indicators.	ai	2026/05/02
semgrep	semgrep:dynamic-require	AI (semgrep): Used to load ember-source package.json for version detection at build time; not user-controlled arbitrary module loading.	ai	2026/05/02
phantom-deps	phantom-dep:ember-cli-babel	AI (phantom-deps): ember-cli-babel is a legitimate runtime dep used via config/build tooling, not direct import; stable false positive for this package.	ai	2026/04/28

Versions (showing 51 of 66)

View all versions

Version	Deps	Published
1.20.5	8 / 20	2026-06-25
1.20.4	8 / 20	2026-06-05
1.20.3	8 / 20	2026-05-26
1.20.2	8 / 20	2026-03-24
1.20.1	8 / 20	2026-03-04
1.20.0	8 / 20	2026-02-24
1.19.7	8 / 20	2026-02-04
1.19.6	8 / 20	2025-12-23
1.19.5	8 / 20	2025-11-26
1.19.4	8 / 20	2025-11-11
1.19.3	8 / 20	2025-11-11
1.19.2	8 / 20	2025-10-15
1.19.1	8 / 20	2025-10-02
1.19.0	8 / 20	2025-09-30
1.18.3	8 / 19	2025-09-30
1.18.2	8 / 18	2025-09-25
1.18.1	8 / 18	2025-07-22
1.18.0	8 / 18	2025-05-20
1.17.3	8 / 18	2025-05-07
1.17.2	8 / 18	2025-04-18
1.17.1	8 / 18	2025-04-03
1.17.0	8 / 18	2025-04-03
1.16.13	8 / 18	2025-04-03
1.16.12	8 / 18	2025-03-20
1.16.11	8 / 18	2025-02-21
1.16.10	8 / 18	2024-12-16
1.16.9	8 / 18	2024-10-10
1.16.8	8 / 18	2024-10-09
1.16.7	8 / 18	2024-10-01
1.16.6	8 / 18	2024-08-30
1.16.5	8 / 18	2024-06-25
1.16.4	8 / 18	2024-06-20
1.16.3	8 / 18	2024-06-11
1.16.2	8 / 18	2024-05-29
1.16.1	8 / 18	2024-04-30
1.16.0	9 / 17	2024-04-18
1.15.1	9 / 17	2024-04-10
1.15.0	9 / 17	2024-03-07
1.14.0	8 / 18	2024-02-28
1.13.5	8 / 18	2024-02-01
1.13.4	8 / 18	2023-12-13
1.13.3	8 / 18	2023-11-12
1.13.2	8 / 18	2023-09-29
1.13.1	8 / 18	2023-08-02
1.13.0	8 / 18	2023-07-21
1.12.3	8 / 18	2023-07-13
1.12.2	8 / 18	2023-07-01
1.12.1	8 / 18	2023-06-30
1.12.0	8 / 18	2023-06-28
1.11.1	8 / 18	2023-06-13
1.11.0	8 / 18	2023-05-17

v1.17.2

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.17.1

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.17.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.16.13

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.16.12

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.16.11

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.16.10

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.16.9

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.16.8

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.16.7

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.16.6

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.16.5

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.16.4

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.16.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.16.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.16.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.16.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.15.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.15.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.14.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.13.5

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.13.4

2 findings

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

INFO Publisher changed: ef4 → real_ate (on 2023-12-13, known maintainer) provenance

This version was published by a different npm account (real_ate) than the most recent previously approved version (ef4) on 2023-12-13, but real_ate is listed as a maintainer on prior approved versions (matched on name). This looks like a manual publish by a known maintainer rather than a publisher change. Recorded as INFO for audit trail.

v1.13.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.13.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.13.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.13.0

2 findings

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

INFO Publisher changed: ef4 → nullvoxpopuli (on 2023-07-21, known maintainer) provenance

This version was published by a different npm account (nullvoxpopuli) than the most recent previously approved version (ef4) on 2023-07-21, but nullvoxpopuli is listed as a maintainer on prior approved versions (matched on name). This looks like a manual publish by a known maintainer rather than a publisher change. Recorded as INFO for audit trail.

v1.12.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.12.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.12.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.12.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.11.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.11.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.