Use HTTPS URLs for linking to package archives.