Skip to content

Security: ShaheenMedTech/Emergency-Toolkit

Security

SECURITY.md

Security and Clinical Safety

Emergency Toolkit is an educational and clinical reference aid. It does not replace local protocols, specialist advice, or independent clinical judgment. Verify doses, units, concentrations, routes, contraindications, and treatment pathways against current authoritative guidance before patient care.

Reporting

For a suspected security vulnerability, use GitHub's private vulnerability reporting if Security → Report a vulnerability is available. If it is unavailable, open a minimal issue asking for a private contact channel without publishing exploit details or sensitive information.

For an incorrect calculator result or clinical-content concern, report the affected version or commit, module, synthetic inputs with units, observed and expected results, and supporting references. Do not include real patient information. Clearly identify potentially unsafe behavior so it can be reviewed before further use.

Do not submit credentials, secrets, real patient data, or confidential institutional information in issues, pull requests, screenshots, or test fixtures.

Scope and limitations

Security and safety reports may concern script injection, unsafe input handling, dependency or build integrity, calculator behavior, units, or misleading clinical output. Development branches and draft pull requests may include incomplete or unvalidated changes. Automated structural checks are not clinical validation.

No fixed response or remediation deadline is guaranteed.

There aren't any published security advisories