Keeping players, contributors, and testers safe is a top priority. Because Minecraft modpacks include Java-based software, every release is carefully reviewed to help ensure it is safe, stable, and free from malicious content. This policy explains how Toast Revised is distributed, how to report security concerns, and the practices used to help protect the project.

To ensure a safe installation, only download Toast Revised from the official project pages. Files downloaded from third-party websites cannot be verified and may not be safe.

• Modrinth: https://modrinth.com/modpack/toast-revised
• CurseForge: https://curseforge.com/minecraft/modpacks/toast-revised
• GitHub Releases: https://github.com/Adventurehkus/Toast-Revised

If a security vulnerability, compromised file, or exploit is discovered, please do not create a public GitHub Issue. Publicly disclosing a vulnerability before it is resolved could put users at risk.

Instead, follow these steps:

1. Document the Issue: Include a clear description of the problem, affected files, and steps to reproduce it if possible.
2. Report It Privately: Contact the project maintainer (Adventurehkus) through GitHub or another designated private reporting channel.
3. Allow Time for Review: Reports will be investigated as quickly as possible. If confirmed, a fix will be developed and released before additional details are shared publicly.

Every Toast Revised release follows a process designed to improve security and reliability.

• Automated Scanning: Project files are checked using automated tools to help identify malicious content or unexpected changes.
• Trusted Sources: Mods and dependencies are downloaded from their official project pages whenever possible.
• Timely Updates: Security fixes and important dependency updates are included in new releases as vulnerabilities become known.

Thank you for helping keep Toast Revised safe for everyone in the community.