It's now possible to assert against any code that has been added in a PR. Below is an example of how you might ensure that CommonJS exports are not used.