package: remove extraneous https://