First thought, which came to my mind, was a security use case to get it to a point for sbom handling and tracking. In particular, respective to all the recent package vulnerabilities.

Repology provides an API but it's unstable: https://repology.org/api/v1