[fix] escape package name of owner cli HTTP request