Fails without insecure package