3va launches a secure‑by‑default JavaScript runtime, blocking post‑install scripts
3va is a Rust‑based JavaScript and TypeScript runtime that denies every capability unless explicitly granted, so post‑install scripts never run. It drops into existing Express or Next.js projects without changes while providing built‑in package management, testing and bundling, giving developers a security‑first alternative to Node or Bun.