← Home

@lingui/babel-plugin-lingui-macro

Babel plugin that transforms Lingui compile-time macros into optimized runtime calls

32
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

andrii.bodnarserhiydmytryshyn

Keywords

linguibabel-pluginbabelmacrocompile-timei18nasttransformationmessageformat

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:@lingui/conf AI (dependencies): @lingui/conf is a first-party sibling package in the same Lingui monorepo; unvetted status is an artifact of registry lag, not a real risk. ai
dependencies unvetted-dep:@lingui/message-utils AI (dependencies): @lingui/message-utils is a first-party sibling package in the same Lingui monorepo; unvetted status is an artifact of registry lag, not a real risk. ai
provenance publisher-changed AI (provenance): Transition from personal account to GitHub Actions CI/CD with SLSA provenance attestation is a legitimate and security-improving change for the @lingui org's release process. ai
phantom-deps phantom-dep:@babel/runtime AI (phantom-deps): @babel/runtime is a declared dependency in package.json; phantom-dep false positive for this Babel plugin package. ai

Versions (showing 32 of 32)

Version Deps Published
6.6.0 2 / 12
6.5.0 4 / 10
6.4.0 4 / 10
6.3.0 4 / 9
6.2.0 4 / 9
6.1.0 4 / 8
6.0.1 4 / 8
6.0.0 4 / 8
5.9.5 6 / 6
5.9.4 6 / 6
5.9.3 6 / 6
5.9.2 6 / 6
5.9.1 6 / 6
5.9.0 6 / 6
5.8.0 6 / 6
5.7.0 6 / 6
5.6.1 6 / 6
5.6.0 6 / 6
5.5.2 6 / 6
5.5.1 6 / 5
5.5.0 6 / 5
5.4.1 6 / 5
5.4.0 6 / 5
5.3.3 6 / 5
5.3.2 6 / 5
5.3.1 6 / 5
5.3.0 6 / 5
5.2.0 6 / 5
5.1.2 6 / 5
5.1.1 6 / 5
5.1.0 6 / 5
5.0.0 6 / 5

v6.6.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v6.5.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.