I can't view those links and can't reproduce this locally:

Note that this is only expected to find commits which were in the package when they were imported. So if you import a repository, then define a package, it won't get any hits. This is driven by two concerns:

• A practical technical concern: package queries are arbitrarily expensive and executing them inline would be slow and complex and in some cases impossible.
• A mild product concern: as a package definition changes over time, it's desirable for old commits which used to be part of the package to show up as results.

The way that package membership is currently represented (as a "no audit required" audit relationship) is real dumb, and there's no way to rebuild history after defining packages, and this whole thing isn't communicated as clearly as it should be. But I believe this does basically work as expected today.

I'd like to fix these things eventually, but they probably don't make the cut for the "dark ages" iteration.