Forbid some package names:

all
any
false
module
name
none
null
package
true
undefined
unknown
unspecified

and maybe:
no
off
on
version
yes

These are already forbidden, because they don't work on Windows:

aux
com[0-9]
con
nul
prn
lpt[0-9]