Do not use API download URIs

- instead, use public URIs for tags
Fix source URLs for component repos

- Added edge case for ensuring source URLs of component repos are reported
  correctly
- Updated packages.json
Released PDF 2.0.2