fix to use yaml.safeLoad() instead of deprecated feature of js-yaml