Enhanced PURL processing

[anthonyharrison]

Enhance PURL processing to

• Ensure follows correct PURL specification
• On;line only - check that the indicated PURL refers to an real and existing package to try and detect dependency confusion