performed security audit and recorded notes in readme