package.json update, LICENSE, SECURITY