When dealing with high level metadata (aka context metadata) the best place to find it is in the external catalogs and registries.
With this task, we should create strategy and a priority list for the registries we want to watch and the way we want to link the metadata found to an origin.
- http://repo1.maven.org/maven2/ for Maven packages,
- npmjs.com for NPM packages
note: libraries.io already tracks this packages