xlsx dependency issue

Hi,

I am working with a few Salesforce consultants in a controlled environment. We can download packages from https://www.npmjs.com/ but not from any other site. In your package.json, there is a dependency "xlsx" that should be pulled from "https://cdn.sheetjs.com/xlsx-0.18.8/xlsx-0.18.8.tgz". It is getting blocked by our proxy. What is the purpose of specifying dependency in this way and is there a way to override it when running npm install?

Thank you.