I found an instance where the URL from a NPM package didn't pass PyPI's upload validation. We should check the schemes to ensure they're supported.