The Paper Minecraft Plugin Skill project takes security and safe software development practices seriously. This document outlines supported versions and instructions for reporting vulnerabilities.

We provide active guidance and documentation for modern, currently maintained PaperMC and Minecraft Java versions:

If you discover a security vulnerability within any code sample, template project, or documentation in this repository:

1. Do NOT report security vulnerabilities through public GitHub issues.
2. Instead, please report the issue privately using GitHub Private Vulnerability Reporting on this repository (under the Security tab).
3. Alternatively, contact the maintainers via email at security@example.com (or the repository owner's direct contact).

• A clear description of the vulnerability or exploit vector (e.g., item duplication flaw, memory leak, unsafe asynchronous state mutation, command injection).
• Step-by-step reproduction steps or a minimal test case demonstrating the issue.
• The affected component or file in this repository.
• Any suggested remediation or patch if available.

• Acknowledgement: We will acknowledge receipt of your vulnerability report within 48 hours.
• Assessment: We will verify and assess the severity within 5 business days.
• Resolution: A fix will be drafted and merged into the affected branches as soon as possible.
• Credit: We will credit you in the release notes and advisory (unless you prefer to remain anonymous).