merged with latest security-check framework