TLDR Tech / Dev
Drydock (Website)
Drydock reviews the exact npm, PyPI, or VS Code artifact that will be published, catching risky changes that source-code reviews can miss. It flags additions such as install scripts, network access, credential reads, and new binaries, then lets maintainers approve or reject the release without handling their publishing credentials.
Read the full story