BEACON

← candidates

npm next @16.2.9

score
0.7 high
flagged 2026-06-13 18:59
signals by category
topology 2

maintainers added:

package profile →

Signals fired

signalweightrationale
topology
dist_tag_anomaly 0.5 dist-tags.latest=16.2.9 but max published is 16.3.0-canary.0
shared_repo_different_publisher 0.9 repo 'git+https://github.com/vercel/next.js.git' also claimed by 10 package(s) under different publishers: ['npm/@next/rspack-binding-win32-x64-msvc', 'npm/@next/rspack-binding-linux-x64-gnu', 'npm/@next/rspack-binding-linux-x64-musl'] ...

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "matheuss",
    "matt.straka",
    "vercel-release-bot",
    "zeit-bot"
  ],
  "versions": 3803
}

Evidence (package doc at flag time)

{
  "dependencies_count": 6,
  "dist": {
    "integrity": "sha512-MEOJiq/UvuezAdqVSceHbqDgZt1kDw2tpGVOlsdIoJsQdbN2JY2hpVG4xnXGkbdJUOEWhnRfiu/O4Hpc9Juwww==",
    "tarball": "https://registry.npmjs.org/next/-/next-16.2.9.tgz",
    "unpackedSize": 155026772
  },
  "dist-tags": {
    "backport": "16.2.8",
    "beta": "16.0.0-beta.0",
    "canary": "16.3.0-canary.50",
    "latest": "16.2.9",
    "next-11": "11.1.4",
    "next-12-2-6": "12.2.6",
    "next-12-3-2": "12.3.7",
    "next-13": "13.5.11",
    "next-14": "14.2.35",
    "next-14-1": "14.1.1",
    "next-15-0": "15.1.12",
    "next-15-0-0": "15.0.8",
    "next-15-2": "15.2.9",
    "next-15-3": "15.3.9",
    "preview": "16.3.0-preview.3",
    "rc": "15.0.0-rc.1"
  },
  "latest_version": "16.2.9",
  "maintainers": [
    {
      "email": "matheus.frndes@gmail.com",
      "name": "matheuss"
    },
    {
      "email": "matt.j.straka@gmail.com",
      "name": "matt.straka"
    },
    {
      "email": "infra+release@vercel.com",
      "name": "vercel-release-bot"
    },
    {
      "email": "team@zeit.co",
      "name": "zeit-bot"
    }
  ],
  "num_versions": 3804,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/vercel/next.js.git"
  },
  "scripts": {
    "build": "taskr release",
    "build-storybook": "storybook build",
    "dev": "cross-env NEXT_SERVER_NO_MANGLE=1 taskr",
    "ncc-compiled": "taskr ncc",
    "prepublishOnly": "cd ../../ && turbo run build",
    "start": "node server.js",
    "storybook": "BROWSER=none storybook dev -p 6006",
    "test-storybook": "test-storybook",
    "types": "tsc --project tsconfig.build.json --declaration --emitDeclarationOnly --stripInternal --declarationDir dist",
    "typescript": "tsec --noEmit"
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=16.2.9 but max published is 16.3.0-canary.0",
    "shared_repo_different_publisher": "repo 'git+https://github.com/vercel/next.js.git' also claimed by 10 package(s) under different publishers: ['npm/@next/rspack-binding-win32-x64-msvc', 'npm/@next/rspack-binding-linux-x64-gnu', 'npm/@next/rspack-binding-linux-x64-musl'] ..."
  },
  "time": {
    "created": "2011-07-11T11:00:45.416Z",
    "modified": "2026-06-13T00:09:32.435Z"
  }
}