Last updated
Secure-by-default JavaScript and TypeScript runtime.
$ winget install --id OdinoCano.3va --exact --version 2.1.2Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.
For Intune admins
Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.
Start free 30-day trialNo credit card required.
3va is a JavaScript and TypeScript runtime built on QuickJS with capability-based
sandboxing, post-quantum cryptography (ML-KEM / ML-DSA), and WebAssembly support.
Every permission — filesystem, network, environment variables, subprocess execution —
is denied by default and must be explicitly granted per script.
Post-install scripts are blocked unconditionally.
Built-in process supervisor; no pm2 required.
| Architecture | Type | Scope | Install | Download |
|---|---|---|---|---|
| x64 | Portable in ZIP | - | Direct |
Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.
No known CVEs for 3va.
Coverage is best-effort and depends on a winget package mapping to an NVD CPE entry. Absence here is not a guarantee of safety.
More from OdinoCano or browse javascript, typescript, runtime.