Change when package dependency to not use https

Same as busterjs/buster#321
Merge pull request #6 from cliffano/patch-1

Change when package dependency to not use https