npm heroku-pg @2.9.0

score

0.8012 high

flagged 2026-06-05 12:54

signals by category

identity 2 topology 1

maintainers added: michael.malave

Signals fired

signal	weight	rationale
identity
maintainer_churn	1.0	added: ['michael.malave']
publisher_unrecognized	0.7	latest published by 'uhoh-itsmaciek', not in maintainer set
topology
shared_repo_different_publisher	0.9	repo 'https://github.com/heroku/heroku-pg.git' also claimed by 1 package(s) under different publishers: ['npm/@heroku-cli/plugin-pg']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "dickeyxxx"
  ],
  "versions": 55
}

Evidence (package doc at flag time)

{
  "dependencies_count": 17,
  "dist": {
    "integrity": "sha512-4/8e1vw5IQ/hwPyhXi5ux352XuoxyDFp4TovdniB63kdJjaLFp+EZjNwUCosFeIa2aAoCTwi0j929JnDqdKm5A==",
    "tarball": "https://registry.npmjs.org/heroku-pg/-/heroku-pg-2.9.0.tgz",
    "unpackedSize": 120264
  },
  "dist-tags": {
    "latest": "2.9.0"
  },
  "latest_version": "2.9.0",
  "maintainers": [
    {
      "email": "michael.malave@salesforce.com",
      "name": "michael.malave"
    },
    {
      "email": "npm@jdx.dev",
      "name": "dickeyxxx"
    }
  ],
  "num_versions": 55,
  "repository": {
    "type": "git",
    "url": "https://github.com/heroku/heroku-pg.git"
  },
  "scripts": {
    "release": "np",
    "test": "TZ=utc nyc mocha && standard"
  },
  "signal_details": {
    "maintainer_churn": "added: ['michael.malave']",
    "publisher_unrecognized": "latest published by 'uhoh-itsmaciek', not in maintainer set",
    "shared_repo_different_publisher": "repo 'https://github.com/heroku/heroku-pg.git' also claimed by 1 package(s) under different publishers: ['npm/@heroku-cli/plugin-pg']"
  },
  "time": {
    "created": "2016-07-22T19:40:17.467Z",
    "modified": "2026-06-05T17:32:24.698Z"
  }
}