Restrict allowed characters for component names

Currently, component names can include any character (including forward slash, etc). I propose to reduce the set of allowed characters to those allowed in IPIDs (so, alphanumerics, dash, period and underscore). Based on some cursory querying on Hackage, no one is using any characters which are not these.