script type build can fail if commonjs module type is specified in package.json explicitly

newer versions of glob package break runtime exec if bundled, modify to default to external