add packagist table for upstream monitoring
fix pkgdb2 url for packages acls