Merge commit from fork adding security tests and a patch for the class pollution and remote code execution

Bump version: 8.5.0 → 8.6.0 

Bump version: 8.4.2 → 8.5.0 

Bump version: 8.4.0 → 8.4.1 

updated docs 

Bump version: 8.2.0 → 8.3.0 

Bump version: 8.1.1 → 8.2.0 

Bump version: 8.1.0 → 8.1.1 

updating docs 

Numpy should be optional