Security of 3rd party modules