We prefer the order: `homepage`, `url` `sha1` (optional `head`).