Tootfinder

I've finally found a valid use case for #PyPI attestations: the provenance check lets me find wrong case in #GitHub URLs. Like, if the user is "FooBar", GitHub just lets me use "foobar" in the URL and doesn't correct it in any way, but provenance check will fail!

📦 Package coverage is broad: npm (#pnpm, #yarn, #bun), #PyPI,