BEACON

← candidates

npm heroku-pg @2.9.0

score
0.7627 high
flagged 2026-06-16 16:51
signals by category
identity 2 topology 1 enrichment 1

maintainers added: eblack, k80bowman, nrenke, sbosio_sf, sfjonnpm, tlowrimore

package profile →

Signals fired

signalweightrationale
identity
maintainer_churn 1.0 added: ['eblack', 'k80bowman', 'nrenke', 'sbosio_sf', 'sfjonnpm', 'tlowrimore']
publisher_unrecognized 0.7 latest published by 'uhoh-itsmaciek', not in maintainer set
topology
shared_repo_different_publisher 0.9 repo 'https://github.com/heroku/heroku-pg.git' also claimed by 1 package(s) under different publishers: ['npm/@heroku-cli/plugin-pg']
enrichment
repo_archived 0.7 claimed repo heroku/heroku-pg is archived but package keeps publishing

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "heroku-johnny",
    "erika.wallace",
    "michael.malave",
    "dickeyxxx"
  ],
  "versions": 55
}

Evidence (package doc at flag time)

{
  "dependencies_count": 17,
  "dist": {
    "integrity": "sha512-4/8e1vw5IQ/hwPyhXi5ux352XuoxyDFp4TovdniB63kdJjaLFp+EZjNwUCosFeIa2aAoCTwi0j929JnDqdKm5A==",
    "tarball": "https://registry.npmjs.org/heroku-pg/-/heroku-pg-2.9.0.tgz",
    "unpackedSize": 120264
  },
  "dist-tags": {
    "latest": "2.9.0"
  },
  "latest_version": "2.9.0",
  "maintainers": [
    {
      "email": "npm@jdx.dev",
      "name": "dickeyxxx"
    },
    {
      "email": "eblack@salesforce.com",
      "name": "eblack"
    },
    {
      "email": "erika.wallace@salesforce.com",
      "name": "erika.wallace"
    },
    {
      "email": "jwinn@salesforce.com",
      "name": "heroku-johnny"
    },
    {
      "email": "katy.bowman@salesforce.com",
      "name": "k80bowman"
    },
    {
      "email": "michael.malave@salesforce.com",
      "name": "michael.malave"
    },
    {
      "email": "nrenke@salesforce.com",
      "name": "nrenke"
    },
    {
      "email": "sbosio@salesforce.com",
      "name": "sbosio_sf"
    },
    {
      "email": "jdodson@salesforce.com",
      "name": "sfjonnpm"
    },
    {
      "email": "tlowrimore@salesforce.com",
      "name": "tlowrimore"
    }
  ],
  "num_versions": 55,
  "repository": {
    "type": "git",
    "url": "https://github.com/heroku/heroku-pg.git"
  },
  "scripts": {
    "release": "np",
    "test": "TZ=utc nyc mocha && standard"
  },
  "signal_details": {
    "maintainer_churn": "added: ['eblack', 'k80bowman', 'nrenke', 'sbosio_sf', 'sfjonnpm', 'tlowrimore']",
    "publisher_unrecognized": "latest published by 'uhoh-itsmaciek', not in maintainer set",
    "repo_archived": "claimed repo heroku/heroku-pg is archived but package keeps publishing",
    "shared_repo_different_publisher": "repo 'https://github.com/heroku/heroku-pg.git' also claimed by 1 package(s) under different publishers: ['npm/@heroku-cli/plugin-pg']"
  },
  "time": {
    "created": "2016-07-22T19:40:17.467Z",
    "modified": "2026-06-16T21:36:12.060Z"
  }
}