[backend] validate mapped vendor string
[webui][api] Fix deletion of commented packages/projects