Takes a published npm package (name plus exact version or dist-tag, fetched only...
https://code.halowerk.com/v1/npm-exports-checkOverview
Takes a published npm package (name plus exact version or dist-tag, fetched only from https://registry.npmjs.org with dist.integrity check, at most 8 MiB compressed) or a .tgz as base64 (e.g. the output of npm pack). The tarball is read in memory by a bounded gzip + ustar/PAX/GNU reader (at most 48 MiB unpacked and 20,000 entries; absolute paths and ".." entries reject the tarball; symlinks and hardlinks are listed, never followed; the first path component, normally package/, is stripped as npm…