what if the package does not actually contain "index.html"? looks like this function will still return valid URL leading to possible bugs.