merge-options project Merge Options Vulnerabilities