scanned 16d ago·osv · gitleaks · opengrep · picklescan + heuristics·full breakdown in the Security tab ↓
medspaCy — Clinical NLP Toolkit
medspaCy extends spaCy with clinical NLP components tailored for EHR text. It handles the quirks of clinical documentation — section headers, templated notes, negated findings, family history — that general NLP tools miss entirely.
Key Features
Clinical section detector: History of Present Illness, Assessment/Plan, Medications, Social History, etc.
import spacy
import medspacy
nlp = medspacy.load()
doc = nlp("Patient has no history of diabetes. Mother has hypertension.")
for ent in doc.ents:
print(ent.text, ent.label_, ent._.is_negated, ent._.is_family)
npx ai-supply add medspacy-clinical-nlp
Curated mirror of the open-source medspaCy (MIT). Get it from the source.
! Security: Review · 8888/100 · grade Bscanned 16d ago
✓ no compromise signals9 risk-surface · 6/20 OWASP controls flagged
Compromise signals — malicious or tampered code (leaked secrets, backdoors, a dropped executable) — reduce the score, and known dependency CVEs carry a bounded penalty (they warrant review but never QUARANTINE — update the dependency to clear). Other dangerous-by-capability traits are risk surface, expected for some capabilities. Every finding is mapped to its OWASP control below.
What this capability can do · low confidence (static)
Findings mapped to the OWASP Top 10 for LLM Applications (2025) and the OWASP Machine Learning Security Top 10. Expand any flagged control for the exact findings — compromise reduces the score; expected/risk-surface do not, except a known CVE, which carries a small bounded penalty (high/critical → Review).
OWASP Top 10 for LLM Applications
⚠LLM03Supply Chainhigh
Vulnerable/compromised dependencies, models or archives in the artifact.
Tampered model weight files; integrity must be verifiable.
Static check enforces safe formats + records a content hash for downstream verification.
Other findings (3) · hygiene / uncategorized
•Unrecognized file type — '.?' is not on the allowlist · medspacy-medspacy-b7bb7d8/.devcontainer/Dockerfilerisk surface
•Unrecognized file type — '.gitignore' is not on the allowlist · medspacy-medspacy-b7bb7d8/.gitignorerisk surface
•Unrecognized file type — '.flag' is not on the allowlist · medspacy-medspacy-b7bb7d8/resources/de/quickumls/QuickUMLS_SAMPLE_lowercase_POSIX_unqlite/database_backend.flagrisk surface