using outdated xlsxjars dependency introduce know vulnerabilities

[patrickdeutsch-wk]

It does not look like xlsxjars has been maintained since 2014. Using this dependency introduces packages with known vulnerabilities. Specifically it is importing an outdated Apache commons-codec 1.6 jar. See [link] for example of a patch of later versions. (https://issues.apache.org/jira/browse/HTTPCLIENT-2072) It might be best to figure a way to pull the necessary files from directly from Apache POI - the Java API for Microsoft Documents
looks like it is still actively maintained.

[colearendt]

Thanks for reporting this! xlsxjars is still "maintained," it has just not been updated because there are a slew of breaking changes and updating it requires a pretty significant effort. It has been on the backlog for a while, but is unfortunately not something I have had a lot of time to devote to.

#142