BEACON

← candidates

npm @bufbuild/buf @1.75.0

score
0.9463 high
flagged 2026-11-06 01:04
signals by category
identity 1 topology 1

maintainers added: cmahony, kmcdonald-buf

package profile →

Signals fired

signalweightrationale
identity
maintainer_churn 1.0 added: ['cmahony', 'kmcdonald-buf']
topology
shared_repo_different_publisher 0.9 repo 'git+https://github.com/bufbuild/buf.git' also claimed by 7 package(s) under different publishers: ['npm/@bufbuild/buf-darwin-arm64', 'npm/@bufbuild/buf-darwin-x64', 'npm/@bufbuild/buf-linux-aarch64'] ...

Prior profile (what it deviated from)

{
  "had_install_script": true,
  "maintainers": [
    "bufdev",
    "tstamm-buf",
    "bufbot",
    "jdailey_buf",
    "doriakeung"
  ],
  "versions": 86
}

Evidence (package doc at flag time)

{
  "dependencies_count": 0,
  "dist": {
    "integrity": "sha512-uMuBCULLDax9/3d5Lo9mea38vuPDv4mrRVE4XfSq3qPcD5UUxlg0RJ9hm84lYCzI3A3lIvLeChxrw9c1RUiD2w==",
    "tarball": "https://registry.npmjs.org/@bufbuild/buf/-/buf-1.75.0.tgz",
    "unpackedSize": 27436
  },
  "dist-tags": {
    "latest": "1.75.0"
  },
  "latest_version": "1.75.0",
  "maintainers": [
    {
      "email": "pedge@buf.build",
      "name": "bufdev"
    },
    {
      "email": "tstamm@buf.build",
      "name": "tstamm-buf"
    },
    {
      "email": "bot@buf.build",
      "name": "bufbot"
    },
    {
      "email": "jdailey@buf.build",
      "name": "jdailey_buf"
    },
    {
      "email": "dkeung@buf.build",
      "name": "doriakeung"
    },
    {
      "email": "cmahony@buf.build",
      "name": "cmahony"
    },
    {
      "email": "kmcdonald@buf.build",
      "name": "kmcdonald-buf"
    }
  ],
  "num_versions": 91,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/bufbuild/buf.git"
  },
  "scripts": {
    "postinstall": "node ./install.js",
    "prepack": "node ./prepack.js"
  },
  "signal_details": {
    "maintainer_churn": "added: ['cmahony', 'kmcdonald-buf']",
    "shared_repo_different_publisher": "repo 'git+https://github.com/bufbuild/buf.git' also claimed by 7 package(s) under different publishers: ['npm/@bufbuild/buf-darwin-arm64', 'npm/@bufbuild/buf-darwin-x64', 'npm/@bufbuild/buf-linux-aarch64'] ..."
  },
  "time": {
    "created": "2023-02-03T20:16:23.387Z",
    "modified": "2026-10-22T01:12:29.548Z"
  }
}