package: point to git repos.

As per https://npmjs.org/doc/json.html , the dependency and repository
URLs should be directly VCS-pareable, rather than human-friendly project
pages.  This reverts a few changes made in 4eb21c8.