phylum-dev/vuln-reach

Support `"exports"` field in `package.json`

Opened this issue · 0 comments

We currently rely on the "main" field in package.json to determine an entry point module for a package.

Supporting the "export" field would allow us to restrict which exports are actually reachable directly from dependents and produce smaller graphs.