This project contains routing data and update automation; it does not operate a proxy service or collect user traffic.
Report a security issue privately to the repository maintainer instead of opening a public issue when it involves:
- a compromised upstream or malicious ruleset update;
- workflow or supply-chain abuse;
- a rule that redirects sensitive traffic to an unsafe policy;
- accidentally committed credentials, private hostnames, or personal data.
Include the affected file, commit, impact, and a safe reproduction. Do not include live credentials or unredacted user traffic.
Ruleset correctness reports that do not expose sensitive information may use a normal issue.
本项目包含分流数据和更新自动化，不运营代理服务，也不收集用户流量。
以下问题请私下联系仓库维护者，不要直接创建公开 Issue：
- 上游被入侵或 ruleset 更新包含恶意内容；
- GitHub Actions 或供应链滥用；
- 规则把敏感流量导向了不安全策略；
- 仓库意外提交了凭证、私人主机名或个人数据。
报告应包含受影响文件、提交、影响和安全的复现方法。不要发送真实凭证或未脱敏用户流量。
不涉及敏感信息的普通规则准确性问题可以使用公开 Issue。