Security risk mostly depends on what your package does. If you can provide more details on what does your package do and why do you think it can be a security risk, we can provide a better feedback.