Remove xlsx dependency

[lukasmatta]

Dependency contains vulnerability, the vulnerability does not affect us as we don't use vulnerable parts of the library, but it creates alerts in security tools. The library is maintained under the new name SheetJS which is distributed only via the authoritative source for SheetJS modules.