After double-checking some things, the real winner is actually: https://github.com/nice-registry/all-the-package-names
I made a fairly significant (dumb) mistake in the logic for extracting valid semver versions. I was doing a falsy check, so if any of major/minor/patch in the version was a 0, the whole package was ignored.
The post has been updated to reflect this.