PHP 8.1+ is the recommended minimum. See composer.json for exact illuminate/* version constraints.

If you discover a security vulnerability, please report it responsibly.

For security issues that could affect production deployments or expose sensitive health data, please do not open a public issue. Instead:

1. Email the maintainer directly at ivanwilliam.md@gmail.com
2. Use the subject line: [SECURITY] satusehat-integration

Your report should contain:

• Description of the vulnerability
• Steps to reproduce the issue
• Affected version(s)
• Potential impact assessment
• Any suggested fixes (optional)

• Acknowledgment of your report within 48 hours
• A severity assessment within 7 days
• A fix or resolution timeline based on severity
• Credit in the release notes (unless you request otherwise)

For general bugs and issues, open a public GitHub Issue with:

• PHP version and Laravel version
• Steps to reproduce
• Expected vs actual behavior
• Code snippet or minimal reproduction case
• Full error message or stack trace

• Never commit API credentials, client secrets, or organization IDs to version control
• Store SATUSEHAT credentials in environment variables (.env), not in code
• The library handles OAuth2 tokens internally — do not expose or log raw bearer tokens
• FHIR resources may contain PHI (Protected Health Information) — ensure your application complies with applicable data protection regulations