Two security issues: * https://github.com/CampaignLab/data-pipeline/network/alert/transformers/js-xlsx/package-lock.json/semver/open * https://github.com/CampaignLab/data-pipeline/network/alert/transformers/js-xlsx/package-lock.json/lodash/open
