use https for maven
fix import sorter so that nested packages don't cause it to blow up