The package https://github.com/vercel/ms / https://www.npmjs.com/package/ms specifies "repository": "vercel/ms".
The npm website and cli utility interprets this as a relative url to github.

The SBOM includes the vcs_url as vercel/ms. So I wonder if https://github.com should be prepended in such cases? Maybe with an option to specify a default URL to prepend?