pulse

1# Security Policy
2 
3## Supported Versions
4 
5| Version | Supported |
6|---|---|
7| 1.x | ✅ |
8| < 1.0 | ⚠️ Not yet released |
9 
10## Reporting a Vulnerability
11 
12Pulse is a client-side optimisation mod and does not process network data or execute remote code. However, if you discover a security-relevant issue:
13 
141. **Do not** open a public GitHub issue.
152. Email the maintainers directly or use GitHub's private vulnerability reporting.
163. Include a description of the issue, reproduction steps, and the affected version.
174. You will receive an acknowledgement within 48 hours and a fix timeline within 5 business days.
18 
19## Scope
20 
21- Configuration injection via malicious config files
22- Unsafe deserialization in config import/export
23- Mod API misuse leading to arbitrary code execution
24- Dependency supply chain vulnerabilities
25 
26## Out of Scope
27 
28- Issues caused by other mods or mod combinations that do not involve Pulse's code
29- Vulnerabilities in Minecraft itself
30- Social engineering of Pulse contributors
31 
32## Preferred Languages
33 
34We prefer all communications in English.
35