Describe the bug
The .nuspec specification indicate that package id is case-insensitive. However, the OSV.dev API is case-sensitive for NuGet package id.
To Reproduce
Steps to reproduce the behaviour:
- Calling the following don't return any vulnerabilities:
curl -d \
'{"package": {"name": "snowflake.Data", "ecosystem": "NuGet"}, "version": "2.1.2"}' \
"https://api.osv.dev/v1/query"
- Calling the following return three vulnerabilities:
curl -d \
'{"package": {"name": "Snowflake.Data", "ecosystem": "NuGet"}, "version": "2.1.2"}' \
"https://api.osv.dev/v1/query"
Expected behaviour
The OSV.dev API respect the .nuspec specification case-insensitivity for package id. Invoking the API for NuGet package id snowflake.Data should return the same results as for Snowflake.Data for a given version.
Screenshots
Calling the API for snowflake.Data:
Calling the API for Snowflake.Data:

Describe the bug
The .nuspec specification indicate that package id is case-insensitive. However, the OSV.dev API is case-sensitive for NuGet package id.
To Reproduce
Steps to reproduce the behaviour:
Expected behaviour
The OSV.dev API respect the .nuspec specification case-insensitivity for package id. Invoking the API for NuGet package id
snowflake.Datashould return the same results as forSnowflake.Datafor a given version.Screenshots
Calling the API for
snowflake.Data:Calling the API for
Snowflake.Data: