Your xml-loader package still has a vulnerability

[MrGazdag]

Please merge PR #8 on that repository, as NPM keeps bothering all of us with warnings about vulnerabilities. The change is a single version bump. It has been almost a year.