Fix #1682 by adding some additional validation

We should now report an error when packages containing long URLs are uploaded through the UI.

Fixes #1682