Fix package-url parsing for allow-dependencies-licenses

Fix package-url parsing for allow-dependencies-licenses #1318