
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
ember-cli-migrator
Advanced tools
Important: As of 0.5.0 Node JS v0.10 is no longer supported. Please use Node v0.12 or IOJS instead.
npm install -g ember-cli-migrator
Migrate your files to the standard ember-cli structure, preserving git history.
You can run the command line tool by running the ember-cli-migrator script from within your existing ember project.
The goal of the project is to convert global variables to ES6 Modules. For example:
App.Post = DS.Model.extend({
});
becomes
import DS from "ember-data";
var Post = DS.Model.extend({
});
export default Post;
-h, --help output usage information
-V, --version output the version number
-g, --global [name] Global namespace of Ember application, eg: "MyApplication = Ember.Application.."
-a, --ember-cli-app-name [name], Name of application namespace/modulePrefix. This is the name of the app you would pass to `ember new <ember-cli-app-name>`
-s, --source [source_directory] Directory to perform migration on
-t, --target [target_directory] Directory to output result of migration
-f, --force Migrate even if output files exist
--keep-source Keep source files. (Target does not replicate git history.)
--ignore-subdirs [comma_separated_dirs] Sub-directories in source to ignore
To convert an Ember App Kit-like project and put it back in the same parent directory, you can use the following
ember-cli-migrator -g App -t . -s . -a appkit
You can run the tests by running npm test in the root folder.
You can run bin/ember-cli-migrator from the root of this project and use the command line arguments above.
The project uses recast (which uses Esprima) to walk the JavaScript AST to accurately identify exports and move the file.
FAQs
migrates files over to the ember-cli structure
We found that ember-cli-migrator demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.