WasmQuay

WasmQuay is a static analysis tool for WebAssembly components that decodes `.wasm` binaries to inspect and classify their capabilities, ensuring compliance with defined security policies. It operates completely offline and without dependencies, providing typed JSON manifests for ease of integration with TypeScript environments while facilitating continuous integration (CI) by failing builds when components violate policy constraints. Key features include capability classification, policy evaluation, and component comparison, all designed to enhance the security of WebAssembly usage.