remove insecure packages