security
package.json typo