[jonknee]

If you don't know the correct package name in the first place, nothing in package.json can be used to validate.