Our Projects
One core. Total control. A native server administration framework for Minecraft Java Edition — one codebase, three loaders, no Bukkit or Spigot required.
Admin & Utility Mod · Server-side
Groups, multiple inheritance, wildcards and explicit denies — with a check command that explains its answer instead of returning a bare yes or no. At v1.1.0 it does not yet account for the operator-bootstrap grant.
Kick, ban, tempban, mute, warn and banlist. Punishments are never deleted; lifting one stamps who did it and when.
Homes, warps, spawn, /back, /tpa and staff /tp — plus heal, feed, fly, god, speed and vanish, with real destination-safety checks.
Append-only and SHA-256 hash-chained, so tampering is detectable. IPs, passwords and tokens are redacted as they are written.
A dashboard, player list and per-player actions rendered as a vanilla chest menu. Permission is re-checked on every single click.
Boot with core modules only to recover a server you otherwise cannot start — vanilla's moderation commands stay available throughout.
Pick the jar for your loader — they are not interchangeable. Every file is the exact archived build, and its SHA-256 is published alongside it.
Verify what you downloaded. Each release publishes a
checksums.txt. Run sha256sum -c checksums.txt next to the jar —
the archived bytes are immutable, so a mismatch means the file is not ours.
Reference
All 50, generated from the command catalogue in the source — a test fails the build if this list and the code ever disagree. Every one checks its permission on the server, is rate limited, and writes an audit record.
50 of 50 commands
| Command | Alias | What it does | Module |
|---|---|---|---|
| Loading the command reference… | |||
Releases
Both releases are on GitHub and Modrinth with full changelogs and SHA-256 checksums. Older versions stay published so a bug report can be reproduced against the exact bytes.
The M4-complete release. Rolls builds 1.0.1–1.0.5 into
one artifact and verifies them together on all three loaders. Four
security defects are closed — including /execute as permission borrowing and
two sign/lectern confused-deputy paths — plus safe mode, the generated command reference, and
a genuinely re-reading permissions.json. 214 tests, 0 failures.
The first release — NeoForge, Fabric and Forge at once.
It has two confirmed critical defects: /teleport
bypassed NexusCore entirely with no permission check or audit record, and any non-player command
source was granted root. Both are fixed in v1.1.0. Do not deploy
this version — it stays published only so the archive is complete.
Honest Status
Every confirmed defect awaiting a fix is published rather than withheld, including security-relevant ones. This table carries every High and Medium defect in the repository's own list — not a selection. The remaining Low-severity ones are in IMPLEMENTATION_STATUS.md, which is the authoritative record.
| Defect at v1.1.0 | Severity |
|---|---|
/seen <unknown name> can stall the server. IdentityService.resolve() falls back to a blocking Mojang HTTP lookup on the server thread, so a slow or unreachable Mojang API stalls the whole server for as long as the request takes. Reachable by any ordinary player. First item scheduled for 1.1.1. |
High |
| Vanish misbehaves for onlookers. Four related faults that appear only on another player's client: chat renders as a validation error, un-vanishing does not restore the entity for clients that saw it vanish, vanish is not re-applied to players who join later, and the vanished set survives death while the invisibility flag does not. | Medium |
A second ban or mute does not deactivate the first. /unban lifts one and reports success while the player stays banned; active counts double-count, and the strictest record is not the one returned. |
Medium |
audit.log never rotates. It is read fully into heap and SHA-256'd on the server thread at startup, at shutdown, and on every verify and tail — unbounded growth plus a synchronous full read. |
Medium |
A transient read error can quarantine an intact permissions.json. JsonStore.read() quarantines on any IOException, so a one-off read failure moves a healthy file aside and the next boot starts from defaults. |
Medium |
config.json silently loses operator keys. Loading rewrites the file from the typed object, deleting any key the schema does not know, while reporting no problems found. |
Medium |
players.json is rewritten in full on every login and logout. Never pruned, and each write copies a full .bak and fsyncs twice. |
Medium |
Fabric death messages lose their cause. Every styled death reads <Player> died — on Fabric only. |
Medium |
/pardon and /banlist strand vanilla ban state. Pre-takeover vanilla bans become un-liftable, and /ban-ip and /pardon-ip are separate commands NexusCore never takes over, so IP bans are neither audited nor listed. |
Medium |
Only one player has ever been online at a time. v1.1.0 has been human-tested on a real dedicated server — the admin panel renders to an unmodified vanilla client, and teleporting, player tools and moderation all work — but everything requiring a second player is unverified. If you run a populated server, expect vanish to misbehave for onlookers.
Not built, and not promised: economy, chat channels, jail and reports, scheduler, backups, the benchmark harness, and the custom-screen client GUI. The version number carries no completeness promise.
