Current style is to prefer `homepage` above `url` and `sha1`