https://github.com/roc-lang/roc/pull/8548#discussion_r2603178835 URL packages from `http` should not be permitted unless it is localhost -- this is to prevent some common security vulnerabilities.