Merge commit from fork

adding security tests and a patch for the class pollution and remote code execution

Bump version: 8.5.0 → 8.6.0

Bump version: 8.4.2 → 8.5.0

Bump version: 8.4.0 → 8.4.1

updated docs

Bump version: 8.2.0 → 8.3.0

Bump version: 8.1.1 → 8.2.0

Bump version: 8.1.0 → 8.1.1

updating docs

Numpy should be optional