[1.4] Fix download from file:// urls & properly handle empty <localRepository />