Macaron should support the npm package manager as a build tool and the provenances generated by npm on GitHub Actions: https://github.blog/2023-04-19-introducing-npm-package-provenance/