npm next @16.2.9
score
0.7
high
flagged
2026-06-17 19:11
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=16.2.9 but max published is 16.3.0-canary.0 |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/vercel/next.js.git' also claimed by 10 package(s) under different publishers: ['npm/@next/swc-darwin-arm64', 'npm/@next/polyfill-module', 'npm/@next/swc-linux-x64-musl'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"matheuss",
"matt.straka",
"vercel-release-bot",
"zeit-bot"
],
"versions": 3807
}
Evidence (package doc at flag time)
{
"dependencies_count": 6,
"dist": {
"integrity": "sha512-MEOJiq/UvuezAdqVSceHbqDgZt1kDw2tpGVOlsdIoJsQdbN2JY2hpVG4xnXGkbdJUOEWhnRfiu/O4Hpc9Juwww==",
"tarball": "https://registry.npmjs.org/next/-/next-16.2.9.tgz",
"unpackedSize": 155026772
},
"dist-tags": {
"backport": "16.2.8",
"beta": "16.0.0-beta.0",
"canary": "16.3.0-canary.55",
"latest": "16.2.9",
"next-11": "11.1.4",
"next-12-2-6": "12.2.6",
"next-12-3-2": "12.3.7",
"next-13": "13.5.11",
"next-14": "14.2.35",
"next-14-1": "14.1.1",
"next-15-0": "15.1.12",
"next-15-0-0": "15.0.8",
"next-15-2": "15.2.9",
"next-15-3": "15.3.9",
"preview": "16.3.0-preview.3",
"rc": "15.0.0-rc.1"
},
"latest_version": "16.2.9",
"maintainers": [
{
"email": "matheus.frndes@gmail.com",
"name": "matheuss"
},
{
"email": "matt.j.straka@gmail.com",
"name": "matt.straka"
},
{
"email": "infra+release@vercel.com",
"name": "vercel-release-bot"
},
{
"email": "team@zeit.co",
"name": "zeit-bot"
}
],
"num_versions": 3808,
"repository": {
"type": "git",
"url": "git+https://github.com/vercel/next.js.git"
},
"scripts": {
"build": "taskr release",
"build-storybook": "storybook build",
"dev": "cross-env NEXT_SERVER_NO_MANGLE=1 taskr",
"ncc-compiled": "taskr ncc",
"prepublishOnly": "cd ../../ && turbo run build",
"start": "node server.js",
"storybook": "BROWSER=none storybook dev -p 6006",
"test-storybook": "test-storybook",
"types": "tsc --project tsconfig.build.json --declaration --emitDeclarationOnly --stripInternal --declarationDir dist",
"typescript": "tsec --noEmit"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=16.2.9 but max published is 16.3.0-canary.0",
"shared_repo_different_publisher": "repo 'git+https://github.com/vercel/next.js.git' also claimed by 10 package(s) under different publishers: ['npm/@next/swc-darwin-arm64', 'npm/@next/polyfill-module', 'npm/@next/swc-linux-x64-musl'] ..."
},
"time": {
"created": "2011-07-11T11:00:45.416Z",
"modified": "2026-06-17T19:17:38.252Z"
}
}