Security fix, do not call eval on input
Bump to 0.0.14