update TODO
fix parsing of deb repos with http origins (thanks to Chris Samuel)