Secure controller and package.json