Build a function to check if the target URL is in scope.
(scope []*url.URL, allowUpgrades bool)
source not stored for this graph (policy: none)