pkg: use https url
pkg: new melpa url