Skip to content

Security: stormstrikermc-coder/SleepWell

Security

SECURITY.md

Security Policy

Reporting a vulnerability

Please do not publish exploitable vulnerability details, proof-of-concept code, credentials, or private server data in a public issue.

Use a private contact method published by the project maintainer on the Modrinth project page. If no private reporting method is listed, open a minimal GitHub issue asking for a private contact route without including technical exploit details.

What to include in a private report

When a private channel is available, include:

  • Affected plugin version.
  • Minecraft version and server software.
  • A concise description of the security impact.
  • Reproduction information sufficient for the maintainer to investigate.
  • Any relevant logs, with unrelated personal or server information removed.

Please allow the maintainer reasonable time to investigate and prepare a fix before publicly disclosing the issue.

Scope

This policy applies to the plugin and files maintained in this repository. The repository currently contains documentation and collaboration templates; plugin source code has not yet been imported.

There aren't any published security advisories