package.json: update licenses URL; change rep URL to use firewall-friendly "https://"