Reject non-https download URLs from registry metadata#15

andrew merged 1 commit intomaingit-pkgs/registries:mainfrom

validate-metadata-urlsgit-pkgs/registries:validate-metadata-urlsCopy head branch name to clipboard