update package extend to >2.0.2 to remove package vurnerability

[RVledder]

Vurnerability report: https://nvd.nist.gov/vuln/detail/CVE-2018-16492

[RVledder]

Duplicate of #93. But different fix as also noted by @icetee.