PHFrame is currently alpha software. Security fixes are applied to the latest code on the main branch until stable releases are available.
Please report suspected vulnerabilities privately through GitHub's Security → Report a vulnerability feature for this repository. If private vulnerability reporting is unavailable, contact the maintainer through the email address listed on the GitHub profile and avoid including exploit details in the first message.
Do not open a public issue for an unpatched vulnerability.
PHFrame is not currently a complete security boundary for sensitive health data. Deployers are responsible for authentication, authorization, transport security, secret management, backups, database access controls, logging, and compliance with applicable law and policy.