Extract vcs_url from project_urls.Source

This helps ORT resolve VCS provenance when artifact download fails.
Populated from code_view_url

Signed-off-by: Kai Hodžić <hodzic.e.k@outlook.com>

Author: voidpetal

src/python_inspector/package_data.py

@@ -91,6 +91,11 @@ async def get_pypi_data_from_purl(
     homepage_url = info.get("home_page")
     project_urls = info.get("project_urls") or {}
     code_view_url = get_pypi_codeview_url(project_urls)
+    vcs_url = None
+    if code_view_url:
+        vcs_url = code_view_url.rstrip("/")
+        if not vcs_url.endswith(".git"):
+            vcs_url = vcs_url + ".git"
     bug_tracking_url = get_pypi_bugtracker_url(project_urls)
     python_version = get_python_version_from_env_tag(python_version=environment.python_version)
     valid_distribution_urls = []
@@ -197,6 +202,7 @@ def remove_credentials_from_url(url: str):
             api_data_url=remove_credentials_from_url(api_url),
             bug_tracking_url=bug_tracking_url,
             code_view_url=code_view_url,
+            vcs_url=vcs_url,
             license_expression=info.get("license_expression"),
             declared_license=get_declared_license(info),
             download_url=remove_credentials_from_url(dist_url),