vvva-cli

3va is a JavaScript and TypeScript runtime built on V8 with
capability-based sandboxing, post-quantum cryptography (ML-KEM / ML-DSA),
and WebAssembly support.

Every permission — filesystem, network, environment variables, subprocess
execution — is denied by default and must be explicitly granted per script.
Post-install scripts are blocked unconditionally.
Built-in process supervisor; no pm2 required. MIT licensed.