jmfayard chore: fix vulnerabilities