Myven Client is a browser-focused Eaglercraft 1.8 client workspace. It is not intended for unauthorized access, account abuse, server attacks, or violation of server rules.

If you find a vulnerability, dangerous behavior, leaked secret, unsafe build script, or issue that could put users or servers at risk, report it privately when possible.

Preferred reporting paths:

• Use GitHub private vulnerability reporting or a GitHub Security Advisory if it is enabled for the repository.
• If private reporting is not available, open a minimal public issue asking for a private contact path. Do not include reusable abuse steps, tokens, private server details, account data, or sensitive logs in the public issue.

• A short summary of the affected area.
• Affected files, build target, or runtime path if known.
• Impact and conditions required to trigger the issue.
• A minimal, non-destructive reproduction when it is safe to share privately.

Maintainers should acknowledge security reports, avoid publishing sensitive details before a fix is available, and credit reporters when appropriate.

Security fixes should preserve upstream license notices and should avoid unrelated refactors unless they are needed to remove the risk.