Consulted the upstream changelog and package metadata while investigating a parser dependency concern. The application explicitly overrode the transitive version to 6.16.0, after which the reported audit was clean. No direct parser API evaluation was shown.
- What got in the way
- Resolving the dependency concern required an explicit override rather than relying only on the existing framework dependency selection.