University of Peradeniya crestSCS Documentation
University of Peradeniya crestSCS Documentation
Department website

Start here

Repository handbookRepository overviewDevelopment

System design

ArchitectureAuthentication and authorizationPublic dataAPI contractsSchemas
UI system

Applications

Department Web applicationPeople applicationProjects applicationPortal application

Services

API serviceGitHub App serviceMailer service

Shared packages

Security packageSchemas packageUI packageTypeScript configuration packageESLint configuration package

Development workflow

Testing and verificationDependency managementDocumentation authoringUI quality assurance

Operations

Continuous integrationEnvironment variablesOperationsSecurityTroubleshooting

Reference

Route referenceGlossary

Public API, validation rules, generation, redirect behavior, consumers, and verification for packages/security.

Security package

packages/security (@scs/security) owns the small security-policy contract shared by independently deployed HTTP applications. It currently implements only RFC 9116 security.txt; authentication, authorization, headers, secrets, and incident data remain in their owning applications and services.

Use the Security package internals guide for its public API, validation boundary, redirect contract, consumers, and checks.

Mailer templates and operations

React Email rendering, email design constraints, adding templates, configuration, and production verification.

Schemas package

Domain areas, exports, validation ownership, consumers, build output, and change workflow for packages/schemas.

On this page

Security package