Switch URL to HTTP. More reliable. Added PKG_CPE_ID for proper CVE tracking. Signed-off-by: Rosen Penev <rosenp@gmail.com>
Signed-off-by: Ted Hess <thess@kitschensync.net>