xmldom security warning - cldr dependency unused?

[kulmann]

Hey guys, we've had a security warning regarding xmldom in https://github.com/owncloud/ocis - see https://nvd.nist.gov/vuln/detail/CVE-2022-39299

The outdated xmldom package comes from the cldr version you declared as a dependency in your package.json, see https://github.com/Kopano-dev/kpop/blob/master/package.json#L26

However, I can't find any use of cldr in your code base. Even the commit that introduced it doesn't seem to reference the package in any way.

Is it safe to remove the cldr dependency from kpop? In that case I'd happily make a pull request.