remove insecure + autopublish packages