Returns the findings for graph, or an empty list when the provider has nothing to say about this project. Returning nothing is the normal case for a targeted provider and is never an error.