secured mouseup event
update package.json and readme