defusedxml added to list of monitored packages