As part of #260, we want to be able to look up dependencies in
https://Ecosyste.ms via their pURL, which we need to expose as part of
the `renovate` package, instead of it being inside the
`renovate-to-sbom` command.