GradleMC is a local Minecraft diagnostics mod. Most reports are ordinary bugs, crashes, bad configurations, mod conflicts, or documentation problems. Security reports are for risks affecting users, maintainers, project distribution, dependencies, privacy, or release integrity.

Current Forge 1.20.1 artifact:

gradlemc-1.1.0-forge-1.20.1.jar

This release is implemented in Kotlin and requires Kotlin for Forge. Minecraft 1.20.1 still requires Java 17 at runtime.

The Quilt line is discontinued. Existing legacy Quilt artifacts may remain downloadable, but users should not expect new GradleMC Quilt maintenance or security releases.

For Forge 1.20.1 v1.1.0, Kotlin for Forge is part of the expected runtime dependency chain. Dependency confusion, malicious mirrors, tampered Kotlin-for-Forge downloads, or documentation that directs users to an unofficial dependency source can be security concerns.

A filename alone is not proof that a jar is official. Verify release source, project identity, and expected loader/Minecraft target.

Open a GitHub issue if you find or suspect:

• fake GradleMC downloads, mirrors, installers, or jar files;
• tampered files pretending to be official GradleMC releases;
• malicious or misleading dependency links;
• project links or documentation that could direct users to unsafe downloads;
• accidental exposure of sensitive project or user information;
• unexpected network/telemetry behavior attributed to GradleMC;
• supply-chain concerns involving dependencies, release references, build artifacts, attribution, or license scope.

Bring evidence: links, filenames, hashes if available, screenshots if useful, where you found the problem, and why it appears suspicious.

These belong in normal support or bug channels:

• ordinary crashes;
• missing Kotlin for Forge causing v1.1.0 not to load;
• command failures;
• GUI problems;
• bad configuration behavior;
• mod conflicts;
• low FPS, lag, or memory pressure;
• server startup failures unrelated to a security boundary;
• missing reports;
• unsupported loader/Minecraft-version requests;
• requests for new Quilt versions;
• issues caused by modified jars or unofficial modpacks.

For reports that are safe to discuss publicly, use GitHub Issues:

https://github.com/SoumyajitXD/GradleMC/issues

Do not post secrets or sensitive personal data publicly. Redact private information before sharing logs, reports, or screenshots.

GradleMC is designed without behavioural telemetry, analytics tracking, cloud AI, or automatic report uploads. However, locally generated logs and diagnostic reports can contain local paths, mod names, Java/JVM details, loader information, runtime context, and server/modpack information.

Review exported evidence before sharing it.

The Forge 1.20.1 source currently checked into main is still the legacy Java v1.0.4 tree. It is not the Kotlin v1.1.0 source. Security reviews of the published v1.1.0 artifact should not assume that the legacy checked-in Java tree is byte-for-byte representative of that release until the Kotlin source has been synchronized.

GradleMC's original repository files are licensed under Apache-2.0 through LICENSE. That does not relicense Minecraft, Forge, Fabric, NeoForge, Quilt, Kotlin for Forge, third-party mods, libraries, third-party assets, screenshots containing third-party content, tools, or external project content.