remove autopublish and insecure packages