make sure all chars are replaced, fix issue 396

[lts-po]

This should fix problems with artifact names containing invalid characters:
"Error: Artifact name is not valid: xyz-rrr:0.1.2-dev.spdx.json. Contains the following character: Colon :"

#396

[kzantow]

Hi -- this looks like a good change but a couple things:

• Could you sign-off your commits?
• The files in dist/* need to be regenerated (this would typically happen automatically if you ran npm install) you can manually run this with npm run package
• Would you be able to add a very simple test for this so we can avoid regressions?

[lts-po]

@kzantow commits should be signed off now, added test & pushed dist.

[kzantow]

@lts-po -- it looks like there are still commits which are not signed off, maybe just squash them all, sign and force-push again?