added package validation for security checks