fix: use expr-eval fork to fix security issue (#244)

fix: use expr-eval fork to fix security issue (#244) #168