a possible bug in rollup node resolve? This might be an unavoidable implementation detail/fact, but this surprised me. I was able to spoof the export of another module. $ yarn test