directly uses cwc-sacklist instead of compiled lib