pub file security note