removing insecure package