Skip to content

Security: yosh-wang/MPV-Settings

Security

SECURITY.md

🔒 Security Policy

Reporting a Vulnerability

If you discover a security vulnerability in this project, please do not report it in a public issue.
Instead, contact the maintainer privately:

  • 💬 GitHub: @yosh-wang
  • 💬 QQ groups: see README

We will acknowledge your report within 7 business days, assess the issue, and strive to release a fix or provide a response within 30 days.


📢 Disclosure

Once the issue is resolved, we will publish a new release and credit the reporter in the changelog (unless you prefer to remain anonymous).


📦 Scope

This project is a Windows desktop GUI tool for editing mpv player configuration files (mpv.conf, input.conf, uosc.conf, script options). It runs fully offline and does not collect any data.

Potential security considerations:

  • The tool reads and writes local configuration files — always keep your backups
  • Only download releases from this repository's official Releases page; binaries from other sources may be tampered with

⚠️ If you discover a security issue related to mpv itself, please report it directly to the mpv team via their official channels.


🔒 Thank you for helping keep this project safe


🔒 安全政策

报告安全漏洞

如果你在本项目中发现了安全漏洞,请 不要 在公开 issue 中报告。
请通过以下方式私下联系维护者:

  • 💬 GitHub:@yosh-wang
  • 💬 QQ 群:见 README 上方

我们会在 7 个工作日内 确认并评估问题,并尽力在 30 天内 修复或给出回应。


📢 漏洞披露

修复完成后,我们会发布新版本,并在更新日志中注明感谢报告者(除非报告者要求匿名)。


📦 范围

本项目是一个 Windows 桌面 GUI 工具,用于可视化编辑 mpv 播放器的配置文件(mpv.conf、input.conf、uosc.conf 及脚本配置)。程序完全本地运行、不联网、不收集任何数据。

潜在安全注意事项:

  • 程序会读写本地配置文件——请保留好自动备份
  • 请仅从本仓库官方 Releases 页面下载程序,其它来源的文件可能被篡改

⚠️ 如果你发现与 mpv 本体相关的安全问题,请直接联系 mpv 官方团队 的官方渠道。


🔒 感谢你帮助维护本项目的安全

There aren't any published security advisories