Please report security problems privately, not in a public issue: on the repository's Security tab, choose Report a vulnerability. You'll get a reply as soon as possible.

Examples of what to report:

• a way for the addon to be made to act for a player without their say, such as through chat messages or other players' data;
• a problem in this repository's build and release setup (GitHub Actions, the release workflow) that could let someone tamper with a release.

Releases are only published from this repository's GitHub Releases and CurseForge pages. Treat a download from anywhere else as untrusted.