Secure-by-default JavaScript and TypeScript runtime.
3va is a JavaScript and TypeScript runtime built on V8 with capability-based
sandboxing, post-quantum cryptography (ML-KEM / ML-DSA), and WebAssembly support.
Every permission — filesystem, network, environment variables, subprocess execution —
is denied by default and must be explicitly granted per script.
Post-install scripts are blocked unconditionally.
Built-in process supervisor; no pm2 required.
