https://blog.jupyter.org/posts/2016/ipywidget-security-release/