Please do not publish exploitable vulnerability details, proof-of-concept code, credentials, or private server data in a public issue.
Use a private contact method published by the project maintainer on the Modrinth project page. If no private reporting method is listed, open a minimal GitHub issue asking for a private contact route without including technical exploit details.
When a private channel is available, include:
- Affected plugin version.
- Minecraft version and server software.
- A concise description of the security impact.
- Reproduction information sufficient for the maintainer to investigate.
- Any relevant logs, with unrelated personal or server information removed.
Please allow the maintainer reasonable time to investigate and prepare a fix before publicly disclosing the issue.
This policy applies to the plugin and files maintained in this repository. The repository currently contains documentation and collaboration templates; plugin source code has not yet been imported.