bad url attribute in package.json