root/pypi: links for csaf-validator