> It does know exposes the whole "build", only specific bundles within the build depending on the configuration.

Security side-note. Does this protect against crawling out of the build dir via `../../../` paths?