| Version | Supported |
|---|---|
| main | ✅ |
| < v0.1 | ❌ |
If you discover a security vulnerability in this project, please report it responsibly:
- Do NOT open a public issue
- Email: [email protected] (or open a private security advisory on GitHub)
- Include:
- Description of the vulnerability
- Steps to reproduce
- Affected versions
- Potential impact
We will respond within 72 hours and work on a fix before public disclosure.
- This framework processes player input. Always validate and sanitize command arguments.
- Avoid logging sensitive player data (UUIDs, IPs, messages).
- When using
@Async, ensure thread-safety with platform APIs (especially Paper/Bukkit).