remove insecure gem repo
add timeout capability to melomel
remove Gemfile.lock as it is not applicable for libs