Mooquant is a personal, solo-developed project for local trading analytics, strategy testing, custom indicators, user-defined trading strategies, backtesting, and Moomoo Japan demo/live trading workflows.

Security reports are welcome when they relate to vulnerabilities in this repository that could affect credential handling, broker API access, account data, trading activity, local files, local database contents, application security boundaries, or unintended order execution behavior.

If you believe you have found a security vulnerability, please do not publish sensitive details in a public GitHub Issue.

Avoid sharing API keys, access tokens, broker credentials, account IDs, private logs, database files, screenshots containing account information, or any other sensitive material publicly.

If GitHub private vulnerability reporting is enabled for this repository, please use that channel. If it is not available, please open a public Issue with only a brief, non-sensitive summary, such as “Potential security issue in credential handling,” and do not include exploit details, secrets, account data, or reproduction steps that could expose sensitive information.

Please do not use security reports for general support, installation help, local environment debugging, brokerage configuration, trading advice, strategy design, feature requests, or ordinary bug reports that do not involve a security risk.

Bug reports and feature requests may be submitted through GitHub Issues, but support requests are not accepted.

I will review valid security reports when time allows, but Mooquant is maintained as a personal project and I cannot guarantee a response timeline, fix timeline, release timeline, coordinated disclosure process, or individual support.

Sponsorship may help me allocate more time to maintenance, documentation, improvements, and future development, but it does not create an obligation for support, custom features, issue prioritization, or security fix timelines.

Mooquant is under active development and does not currently maintain multiple supported release branches. Security fixes, when made, will generally be applied to the current development version of the repository.

Mooquant may interact with broker APIs, market data, account data, order data, strategy logic, and demo or live trading modes. Review all code, configuration, credentials, permissions, and broker-side settings before using the project with real trading accounts.

Nothing in this repository is financial advice. Trading involves risk, and automated or semi-automated tooling can create unexpected losses if misconfigured or used without supervision.