Description
Finds npm packages attributable to the target via verifiable signals: a homepage link to the package or its org on npmjs.com, or package metadata (homepage / repository) pointing at the target host. Candidates are gathered from homepage npmjs.com links plus an npm name search; name matches without a signal are discarded. Absence is a skip, not a fail.