Governance needs to be clarified

grahamegrieve commented 3 years ago

This specification needs to state clearly the following things:

what organization is responsible for governance of the content and accountable for it's maintenance
how issues should be raised, and what the resolution process is (by governments, and by individuals)
a private channel to report secutiy issues with the specification
the license that applies to the specification

jmandel commented 3 years ago

Details here to start; we can set up a PR to incorporate.

https://github.com/smart-on-fhir/health-cards/blob/main/LICENSE describes the license
- spec: CC-BY 4.0
- code for example generation: MIT License)\
Governance and maintenance: SMART Health IT (formally: Computational Health Informatics Program, Boston Children's Hospital, Boston, MA). The process for raising issues is at https://spec.smarthealth.cards/#contributing but we should expand in recommend that folks join https://chat.fhir.org/#narrow/stream/284830-smart.2Fhealth-cards ti discuss
- (As a side note: we intend to bring this into HL7 once we've finished up the content IG -- following the same patter as for SMART App Launch, Bulk CDS Hooks.)
Security issues with the spec -- we should document security@smarthealth.cards as the contact address

jmandel commented 3 years ago

smart-on-fhir / health-cards