npm @next/bundle-analyzer @16.2.9
score
0.7
high
flagged
2026-06-18 11:33
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=16.2.9 but max published is 16.3.0-canary.0 |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/vercel/next.js.git' also claimed by 10 package(s) under different publishers: ['npm/@next/plugin-storybook', 'npm/@next/env', 'npm/next-rspack'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [],
"versions": 3453
}
Evidence (package doc at flag time)
{
"dependencies_count": 1,
"dist": {
"integrity": "sha512-yGWyLbC8MMn+hk9j6l6GammpbUz5S3yZzl3lpoWfVXhIpJfh6kAWG7JwF4WoG3f0VnYRY959yo1QQEI8mV/+jg==",
"tarball": "https://registry.npmjs.org/@next/bundle-analyzer/-/bundle-analyzer-16.2.9.tgz",
"unpackedSize": 3919
},
"dist-tags": {
"backport": "16.2.8",
"beta": "16.0.0-beta.0",
"canary": "16.3.0-canary.56",
"latest": "16.2.9",
"next-11": "11.1.4",
"next-12-2-6": "12.2.6",
"next-12-3-2": "12.3.7",
"next-13": "13.5.11",
"next-14": "14.2.35",
"next-14-1": "14.1.1",
"next-15-0": "15.1.12",
"next-15-0-0": "15.0.8",
"next-15-2": "15.2.9",
"next-15-3": "15.3.9",
"preview": "16.3.0-preview.3",
"rc": "15.0.0-rc.1"
},
"latest_version": "16.2.9",
"maintainers": [],
"num_versions": 3454,
"repository": {
"directory": "packages/next-bundle-analyzer",
"url": "git+https://github.com/vercel/next.js.git"
},
"scripts": null,
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=16.2.9 but max published is 16.3.0-canary.0",
"shared_repo_different_publisher": "repo 'git+https://github.com/vercel/next.js.git' also claimed by 10 package(s) under different publishers: ['npm/@next/plugin-storybook', 'npm/@next/env', 'npm/next-rspack'] ..."
},
"time": {
"created": "2019-02-28T19:52:58.267Z",
"modified": "2026-06-18T00:09:45.182Z"
}
}