Aikido x Drydock | A way for maintainers to catch malware before it ships

Drydock is a free service that inspects staged npm and PyPI package releases (or acts as a GitHub Actions gate) by downloading the exact release artifact into a short-lived sandbox, diffing it against the previous published version, and presenting maintainers with severity-ranked, line-pinned findings (e.g., added lifecycle scripts, new binaries, network-spawning code) so they can approve or reject a publish before it goes live.