fixing security vulnerablities in deps