allow-scripts: config reader does not normalize paths

[boneskull]

The configuration for allow-scripts within package.json does no normalization of the path, e.g.:

"allowBins": {
  "good": "node_modules/good_dep/index.js"
}

This is passed verbatim, even if the platform is win32. The above path is invalid on Windows. It may be processed properly at some point, but it is inconsistent at best. Currently, for allow-scripts to work equivalently on a Windows machine, the consumer would need to change the option to:

"allowBins": {
  "good": "node_modules\\good_dep\\index.js"
}

Seems like a non-starter to me 😜