create-vue-medical

Vue medical project scaffold with HIPAA compliance. A CLI tool to quickly create Vue 3 medical applications with built-in security features and HIPAA compliance requirements.

Features

🏥 Medical Application Features

• ✅ HIPAA-compliant security headers (CSP, HSTS, X-Content-Type-Options, X-Frame-Options, X-XSS-Protection)
• ✅ Data encryption for sensitive information using crypto-js
• ✅ Audit logging for user actions with HIPAA compliance
• ✅ Role-based access control using CASL
• ✅ Secure authentication with token encryption
• ✅ Medical data validation rules (patient ID, SSN, insurance number, etc.)
• ✅ TypeScript support (optional)
• ✅ Pinia for state management (optional)
• ✅ Vitest for testing (optional)
• ✅ Layout components (MainLayout, AuthLayout)
• ✅ Navigation system with authenticated route protection
• ✅ Theme support with light/dark mode toggle
• ✅ Environment variables configuration for sensitive information
• ✅ Internationalization (i18n) support with vue-i18n
• ✅ PWA support for offline functionality and app-like experience
• ✅ Medical-specific components (PatientForm, MedicalDashboard, MedicalChart, MedicalPrescription, MedicalAppointment, MedicalBilling, MedicalRecord, MedicalMedication, MedicalLabResult, MedicalVitalSigns, MedicalImagingViewer)
• ✅ Medical specialty components (Cardiology ECG Viewer, Heart Rate Monitor, Cardiac Output Calculator, Coronary Risk Calculator, Neurology MRI Viewer, Neurological Exam, EEG Viewer, Parkinson Assessment, Ophthalmology Eye Chart, Visual Field Test, Tonometry, Retinal Exam, Orthopedics Joint Range Viewer, Bone Density Test, Fracture Assessment, Joint Replacement)
• ✅ Medical device integration (Bluetooth and USB device connections)
• ✅ Performance optimization with code splitting and bundle analysis
• ✅ WebAssembly and GPU acceleration for medical image processing
• ✅ Voice interaction for hands-free operation
• ✅ AR/VR support for medical data visualization
• ✅ Medical API marketplace for integrating with various medical APIs
• ✅ Template library with predefined medical application templates
• ✅ Zero trust architecture for enhanced security
• ✅ Blockchain integration for immutable medical data storage
• ✅ Multi-region compliance support (HIPAA, GDPR, etc.)
• ✅ Edge deployment for remote healthcare scenarios
• ✅ Hybrid cloud support for enhanced reliability

🔒 Security Ecosystem

• ✅ vue-security-scanner integration for static code security analysis
• ✅ vite-plugin-vue-security for build-time security header configuration
• ✅ ESLint security plugin for code quality and security checks
• ✅ Security audit scripts to filter false positives
• ✅ .vue-security-ignore file for custom security scanning rules
• ✅ Medical security plugin with 9 medical-specific security rules
• ✅ Security plugins directory for custom security extensions

🎯 CLI Features

• ✅ Interactive prompts for project configuration
• ✅ Non-interactive mode with command-line options
• ✅ Position parameter support for project name
• ✅ Help and version information
• ✅ Customizable options (TypeScript, Pinia, Vitest)
• ✅ Preset configurations (minimal, standard, full, hipaa, enterprise, china) for quick setup
• ✅ List available presets for easy configuration selection

🌏 Regional Compliance

• ✅ HIPAA compliance for US healthcare operations
• ✅ GDPR compliance for European operations
• ✅ China compliance for Chinese healthcare regulations (Cybersecurity Law, Data Security Law, Personal Information Protection Law)
• ✅ Multi-region compliance support for global operations
• ✅ All 27 medical components fully compliant with HIPAA, GDPR, and Chinese regulations
• ✅ Access control for all medical components
• ✅ Data encryption for sensitive medical information
• ✅ Data masking for patient privacy protection
• ✅ Audit logging for all medical operations
• ✅ GDPR consent management for data processing
• ✅ GDPR data processing records for compliance tracking
• ✅ Chinese data localization for domestic data storage

Installation

Global Installation (Recommended)

npm install -g create-vue-medical

Local Installation

npm install create-vue-medical

Usage

Interactive Mode

Run the command without options to enter interactive mode:

create-vue-medical

# Using short command
cvm

You will be prompted to configure:

• Project name
• TypeScript usage
• Pinia for state management
• Vitest for testing

Non-Interactive Mode

Use --yes to skip prompts and use default values:

create-vue-medical --yes my-medical-app

# Using short command
cvm --yes my-medical-app

Custom Configuration

Specify options directly:

# Create a project without TypeScript
create-vue-medical --yes --no-typescript my-medical-app

# Create a minimal project
create-vue-medical --yes --no-typescript --no-pinia --no-vitest my-minimal-app

# Use name option instead of position parameter
create-vue-medical --yes --name my-medical-app

# Use preset configuration
create-vue-medical --yes --preset minimal my-minimal-app
create-vue-medical --yes --preset hipaa my-hipaa-app

# List available presets
create-vue-medical --list-presets

# Using short command
cvm --yes --no-typescript my-medical-app
cvm --yes --preset minimal my-minimal-app
cvm --list-presets

Command Options

Usage: create-vue-medical|cvm [options] [project-name]

Create a Vue medical project with HIPAA compliance

Options:
  -V, --version           output the version number
  -y, --yes               Skip prompts and use default values
  -n, --name <name>       Project name
  --no-typescript         Disable TypeScript
  --no-pinia              Disable Pinia
  --no-vitest             Disable Vitest
  -p, --preset <name>     Use preset configuration (minimal, standard, full, hipaa, enterprise)
  --list-presets          List all available presets
  -h, --help              Display this help message

Project Structure

Generated projects include:

src/
├── router/          # Secure router configuration
├── components/
│   ├── common/      # Common components
│   │   └── ThemeToggle.vue
│   ├── layout/      # Layout components
│   │   ├── MainLayout.vue
│   │   └── AuthLayout.vue
│   └── medical/     # Medical-specific components
│       ├── PatientForm.vue
│       ├── MedicalDashboard.vue
│       ├── MedicalChart.vue
│       ├── MedicalPrescription.vue
│       ├── MedicalAppointment.vue
│       ├── MedicalBilling.vue
│       ├── MedicalRecord.vue
│       ├── MedicalMedication.vue
│       ├── MedicalLabResult.vue
│       ├── cardiology/     # Cardiology specialty components
│       │   └── EcgViewer.vue
│       ├── neurology/      # Neurology specialty components
│       │   └── BrainMriViewer.vue
│       ├── ophthalmology/  # Ophthalmology specialty components
│       │   └── EyeChart.vue
│       ├── orthopedics/    # Orthopedics specialty components
│       │   └── JointRangeViewer.vue
│       └── devices/        # Medical device integration components
│           └── DeviceConnector.vue
├── i18n/            # Internationalization configuration
│   ├── index.js
│   └── locales/
│       ├── en.js
│       └── zh.js
├── styles/          # Theme and global styles
│   └── themes.css
├── utils/
│   ├── audit.js                 # Audit logging utilities (HIPAA compliant)
│   ├── crypto.js                # Data encryption utilities
│   ├── validators.js            # Medical data validation rules
│   ├── hipaa-compliance.js      # HIPAA compliance checker
│   ├── zero-trust.js            # Zero trust architecture utilities
│   ├── compliance-manager.js    # Multi-region compliance manager
│   ├── api-marketplace.js       # Medical API marketplace utilities
│   ├── voice-interaction.js     # Voice interaction utilities
│   └── wasm/                    # WebAssembly and GPU acceleration
│       └── medical-image-processor.js
├── views/
│   ├── HomeView.vue
│   ├── LoginView.vue
│   ├── DashboardView.vue
│   └── PatientsView.vue
├── App.vue
└── main.ts

# Security configuration
├── security-plugins/
│   └── medical-security-plugin.js # Medical-specific security rules
├── vue-security-scanner.config.js
├── vite-plugin-vue-security (configured in vite.config.ts)
├── .vue-security-ignore
└── security-scan-filter.js

# Build configuration
├── vite.config.ts
├── tsconfig.json (if TypeScript is enabled)
├── tsconfig.node.json
└── package.json

# Environment configuration
├── .env.example
└── .env.production.example

# CI/CD configuration
├── .github/workflows/ci.yml
└── .gitlab-ci.yml

# Documentation
├── README.md
├── API.md
├── COMPONENTS.md
├── SECURITY.md
└── DEPLOYMENT.md

Security Features

1. Security Headers

Automatically configured in both development and production:

• Content Security Policy (CSP)
• Strict Transport Security (HSTS)
• X-Content-Type-Options
• X-Frame-Options
• X-XSS-Protection

2. Data Encryption

Built-in utilities for encrypting sensitive data:

• Patient information
• Authentication tokens
• Medical records
• API keys and secrets

3. Audit Logging

Comprehensive audit logging for:

• User logins/logouts
• Patient record access
• Administrative actions
• Security events
• API requests and responses
• Medical device interactions

4. Medical Data Validation

Pre-configured validation rules for:

• Medical record numbers
• Patient names
• Ages
• Email addresses
• Phone numbers
• Passwords
• Insurance information
• Medical codes (ICD-10, CPT, etc.)

5. Security Scanning

Integrated security tools:

• vue-security-scanner：Static code analysis
• npm audit：Dependency vulnerability scanning
• Security report filtering：Reduces false positives

6. Zero Trust Architecture

Advanced security architecture:

• Continuous authentication for every request
• Micro-segmentation of medical data
• Least privilege access principles
• Real-time threat detection

7. Blockchain Integration

Immutable data storage:

• Medical record hashing for tamper-proofing
• Audit trail verification
• Secure data sharing between providers
• Patient consent management

Getting Started with Generated Projects

1. Install Dependencies

cd my-medical-app
npm install

2. Development Server

npm run dev

3. Build for Production

npm run build

4. Run Security Scans

# Run static security scan
npm run security:scan

# Run dependency audit
npm run security:audit

# View filtered security report
npm run security:report

Production Deployment

For production deployment, remember to:

1. Set up HTTPS for secure communication
2. Configure environment variables for sensitive information
3. Implement proper backend authentication
4. Conduct regular security audits
5. Maintain HIPAA compliance documentation
6. Set up proper error handling without exposing sensitive information
7. Configure containerization with Docker for consistent deployment
8. Set up CI/CD pipelines for automated testing and deployment

Edge Deployment

For remote healthcare scenarios:

• Edge server configuration for low-latency access
• Offline functionality for areas with unreliable connectivity
• Local data caching for critical medical information
• Edge-to-cloud synchronization when connectivity is available

Hybrid Cloud Support

For enhanced reliability and scalability:

• Multi-cloud deployment for redundancy
• Cloud-edge orchestration for optimal performance
• Disaster recovery across regions
• Cost optimization through strategic resource allocation

HIPAA Compliance Considerations

This tool provides a foundation for HIPAA compliance, but you should also:

• Implement proper backend security measures
• Establish data breach notification procedures
• Conduct regular security risk assessments
• Provide security awareness training for staff
• Maintain business associate agreements (BAAs) with vendors
• Implement access controls and audit trails
• Document patient consent for data use
• Establish data retention and destruction policies

Multi-Region Compliance Support

For global healthcare operations:

• GDPR compliance for European operations
• PIPEDA compliance for Canadian operations
• My Health Record compliance for Australian operations
• NHIS compliance for UK operations
• Local healthcare regulations for other regions
• Cross-border data transfer compliance
• Regional data sovereignty considerations

Contributing

Contributions are welcome! Please feel free to submit a Pull Request.

Documentation

• API Documentation - Complete API documentation
• Components Documentation - Detailed medical components usage guide
• Security Documentation - Security features and best practices
• Deployment Guide - Deployment instructions and best practices
• Architecture Guide - System architecture and design principles
• Performance Optimization Guide - Performance optimization strategies and best practices
• China Compliance Guide - China healthcare regulations compliance guide
• API Marketplace Documentation - Medical API marketplace integration guide
• Voice Interaction Documentation - Medical voice interaction usage guide
• WebAssembly Documentation - Medical WebAssembly development guide
• Blockchain Integration Documentation - Medical blockchain integration guide
• Edge Deployment Documentation - Medical edge deployment guide
• Multi-Region Compliance Documentation - Medical multi-region compliance guide

Component Documentation

For detailed documentation on each medical component, please refer to components-docs directory:

Core Medical Components (11):

• PatientForm - Patient information form with GDPR consent management
• MedicalDashboard - Medical dashboard with patient statistics
• MedicalChart - Medical data visualization chart
• MedicalPrescription - Medical prescription management
• MedicalAppointment - Medical appointment scheduling
• MedicalBilling - Medical billing and insurance processing
• MedicalRecord - Medical record management
• MedicalMedication - Medication management
• MedicalLabResult - Laboratory result management
• MedicalVitalSigns - Vital signs monitoring
• MedicalImagingViewer - Medical imaging viewer

Cardiology Components (4):

• EcgViewer - ECG waveform viewer
• HeartRateMonitor - Real-time heart rate monitoring
• CardiacOutputCalculator - Cardiac output calculation
• CoronaryRiskCalculator - Coronary heart disease risk assessment

Neurology Components (4):

• BrainMriViewer - Brain MRI image viewer
• NeurologicalExam - Neurological examination form
• EegViewer - EEG waveform viewer
• ParkinsonAssessment - Parkinson's disease assessment

Ophthalmology Components (4):

• EyeChart - Visual acuity eye chart
• VisualFieldTest - Visual field testing
• Tonometry - Intraocular pressure measurement
• RetinalExam - Retinal examination

Orthopedics Components (4):

• JointRangeViewer - Joint range of motion viewer
• BoneDensityTest - Bone density testing
• FractureAssessment - Fracture assessment
• JointReplacement - Joint replacement planning

Device Integration (1):

• DeviceConnector - Medical device connector

All components include:

• ✅ Access control (role-based)
• ✅ Data encryption (sensitive information)
• ✅ Data masking (patient privacy)
• ✅ Audit logging (all operations)
• ✅ GDPR compliance (consent management, data processing records)
• ✅ Chinese regulations compliance (data localization, encryption, audit)

License

MIT

Keywords

vue, medical, hipaa, security, scaffold, cli, healthcare, encryption, audit, compliance