Switch URL to HTTP. More reliable. Added PKG_CPE_ID for proper CVE tracking. Signed-off-by: Rosen Penev <rosenp@gmail.com>
Build timestamp prevents reproducible builds [0]. Same for other irrelevant informations e.g. hostname, username. Thanks to debian for the patch. [0] https://reproducible-builds.org/docs/timestamps/ Signed-off-by: Alexander Couzens <lynxis@fe80.eu>