fetch repository URLs from packrat.lock