NX Labs mod library

Nxeon Verified: mods we have actually run

Every mod in our library installs in one click. Some also carry the Nxeon Verified badge, which means we installed that exact build on a fresh test server, started the game with it, watched it load, and checked its licence and file integrity. Here is exactly what the badge means, and what it doesn’t.

Example plugin

Paper · Admin tools

Nxeon Verified

Nxeon Verified: installed and started successfully on Minecraft 1.21.1 (paper) on the date shown; licence and file integrity checked.

  • Installed and started on a test server
  • Licence permits use
  • File matches the source’s checksum
  • Archive structure and file types checked
A compatibility and integrity check, not a security audit of the mod’s code. Expires automatically.
Click the badge on any mod card in your server’s Mods tab to see this panel for that exact build: the game version, the loader, the date, and every check it passed.
The exact wording

One sentence, and we stand behind every word of it

The badge is earned by one build of one mod, on one game version, and the panel behind it says precisely that. It never claims more than the test proved.

Nxeon Verified: installed and started successfully on <game> <version> on <date>; licence and file integrity checked.

What we check

Eight checks, all of them, every time

Seven run automatically against the file itself. The eighth is the one that matters most: a real install on a real, throwaway game server. A build has to pass all eight to earn the badge.

Installed and started

We create a fresh test server of the right game and version, install the build with the same one-click installer you use, restart the game, and read its own log to confirm the server came up and the mod loaded. Then the test server is deleted.

Licence permits use

The project must publish an open licence that allows use and redistribution. “All rights reserved” or no licence at all means no badge, however popular the mod is.

File integrity

We download the file and compare its checksum with the one the mod’s own source publishes. A mismatch flags the build for review straight away.

Approved source

Files must come over HTTPS from the official download host of a source we support, such as Modrinth, Hangar, Thunderstore, uMod, GitHub releases or the Factorio mod portal.

Archive safety

Archives are opened and inspected: no paths that escape their folder, no links, no oversized or compression-bomb entries, and no executable or script types that don’t belong in that game’s mods.

Known-bad list

The file’s hash is checked against our list of files we’ve pulled. Adding a hash to that list revokes every badge for that file at once.

Declared compatibility

The build must state that it supports the exact game version and loader it was tested on, so the badge is never stretched to a version nobody tried.

Complete listing

Name, summary, author, licence, icon, version and file details must all be present, so you know what you’re installing before you install it.

Freshness

A badge that can’t go stale

Mods and games both update constantly, so a verification is tied to the exact build and game version it was earned on, and it lapses on its own.

  1. Per build

    A new release of the mod is a new file. It starts unverified and has to pass every check again.

  2. Per game version

    Passing on Minecraft 1.21.1 says nothing about 1.21.4, so the badge only shows to servers on the version that was tested.

  3. Expires in 30 days

    Every badge carries an expiry date. When it passes, the badge disappears until the build is tested again.

  4. Revoked instantly

    If a build misbehaves after it was verified, we pull the badge at once, and it stays down until a new test passes.

What the badge doesn’t claim

We would rather under-promise. The badge describes a test we ran and the result we saw, nothing more. Mods without it still install in one click; most of the library simply hasn’t been through a test run yet, and that is not a warning about them.

NOT CLAIMEDA security auditWe don’t read or review a mod’s source code, and the badge is not a malware guarantee.
NOT CLAIMEDWorks with every other modEach build is tested on its own. Combinations with other mods aren’t covered.
NOT CLAIMEDAn endorsementVerification says the build ran. It says nothing about whether it suits your server or your players.
FAQ

Questions, answered

Is a mod without the badge unsafe?

No. The badge is new and testing happens one build and one game version at a time, so most of the library hasn’t been through it yet. Every mod still installs in one click, from its own source, with its checksum checked by the installer.

Where do I see the badge?

On mod cards and in the mod preview inside your server’s Mods & Plugins tab. It only appears when the verified build matches your server’s game version and loader. Click it to see every check and the date it ran.

Can I filter for verified mods only?

Yes. The mod browser has a “Nxeon Verified only” switch next to “Fits my server”.

Does Nxeon Verified mean the mod is secure?

No. It is a compatibility and integrity check: the file is what its source published, it is structurally safe to unpack, its licence allows use, and it installed and started on a test server. It is not a review of the mod’s code.

How long does a verification last?

30 days, or until the mod or the game updates, whichever comes first. After that the badge disappears until the build is tested again.

What happens if a verified mod causes problems?

Tell us through support. We can revoke a badge immediately, and adding the file’s hash to our known-bad list removes the badge from every verification of that file.

Your server, your mods, one click

Pick a game, deploy your server, then browse the mod library from your server’s Mods tab, with the builds that fit your server shown first.