The A to F letters are gone: each project now shows one result about its files, Passed, Warning, Malware or Not checked.
Why we removed the grade
A letter mixed several things in one: how often a project was updated, how many players used it, and what we found in its files. A mod could lose points for being old while its files were fine. A letter could also look good while the most important fact was elsewhere on the page.
When players look up a mod, the question is almost always the same: is there something harmful in this file? The new result answers that question, and only that one.
What the results mean
- Passed: our checks found nothing harmful in its current files.
- Warning: something that could be risky, for example a mod that sends data to an outside server. The Security and Privacy tabs say what and where.
- Malware: code that takes control of your computer or account, for example code that steals your logins. We do not offer its download.
- Not checked: we could not check its files yet, or its author does not let other sites download them.
What we check
- Files checked: every current file, the newest release or beta for each Minecraft version and loader, on Modrinth and CurseForge. We compare the fingerprint and the content of each file with the malware we and others have found, and look at what is inside it.
- Deep check: we read the code of the files and look for what it does, such as connections to outside servers or code downloaded while the game runs.
- Privacy: the web addresses in the code and the data a mod may send.
- AI: AI services or AI images found in the files. This is a fact we show, not a judgment: using AI is neither good nor bad, and it plays no part in the security result.
You can also check the files you already have, a single mod or your whole mods folder, with the Mod Scanner.
What our checks cannot do
Our checks look for known signs of harm. They cannot prove that a file is harmless. A Passed result means we found nothing, not a promise. When we find malware, we write about it in Articles.
For developers
In the API, grade and grade_note are now always empty. Use security.
Modgrade stays Modgrade.
