> cat /dev/github | grep security-tools
discovered 07 Sep 2026

WasmQuay

Rust ★ 36 via github-topic
→ View on GitHub
WasmQuay is a static analysis tool for WebAssembly components that inspects and classifies their capabilities while ensuring compliance with specified policies. It decodes `.wasm` binaries offline, assesses their imports against user-defined rules, and generates a typed JSON manifest for further exploration in TypeScript. Notable features include capability classification, policy enforcement during continuous integration (CI), and comparison of component substitutability, all executed without runtime dependencies or execution of the WebAssembly code.