Use https for package dependency