updated regex patterns in package entity to prevent user@host for http config but still allow ssh packages