Function flat_container_url 

pub fn flat_container_url(base: &str, name: &str) -> String

Builds the flat-container version-enumeration URL for name.

The package id is lowercased (NuGet ids are case-insensitive and every V3 API path segment is lowercased) and percent-encoded before being interpolated into the path. Encoding is load-bearing, not cosmetic: an unencoded id lets a crafted PackageReference Include="..." value inject path segments (../../etc/passwd collapses dot-segments) or truncate the path at #/?/control characters, making deps-lsp silently resolve and display a different real package’s version data under an attacker-chosen name.