fix(security): resolve Hypatia findings

fix(security): resolve Hypatia findings #333