replace obsolete `Safe` library with the newer version `safe`

Both packages have the same API, so the change is transparent.