Fix security dependency in README