无路径遍历或无效片段

¥No path traversal or invalid segments

导出目标不得解析到包根目录之外的位置。此外，像 .（单点）、..（双点）或 node_modules（及其 URL 编码的等效项）这样的路径段通常不允许出现在初始 ./ 之后的 target 字符串中，也不允许出现在替换为目标模式的任何 subpath 部分中。

¥Export targets must not resolve to a location outside the package's root directory. Additionally, path segments like . (single dot), .. (double dot), or node_modules (and their URL-encoded equivalents) are generally disallowed within the target string after the initial ./ and in any subpath part substituted into a target pattern.

// package.json
{
  "name": "my-package",
  "exports": {
    // ".": "./dist/../../elsewhere/file.js", // Invalid: path traversal
    // ".": "././dist/main.js",             // Invalid: contains "." segment
    // ".": "./dist/../dist/main.js",       // Invalid: contains ".." segment
    // "./utils/./helper.js": "./utils/helper.js" // Key has invalid segment
  }
} 拷贝