drop lambda layer zip · parse contents + dependencies
parses nodejs/node_modules · python/site-packages · package.json · requirements.txt · native .so/.node binaries
heuristic layer screener · vendor zip layout varies · not definitive proof of compromise