NSax dependency introduction, brings LGPL-3.0 licence, from 2.7.4 -> 2.7.5

[nicolashemery]

First of all, thanks for your great work with this project.

NPOI Version

2.7.4 ->2.7.5

Issue Description

We use your .Net package in our product.
We regularly update our dependency as a good practice.
We check licences compliance of the full dependency tree in our CI/CD.
And we found out that in your last update you added a dependency to the package NSax.
The issue is that this package is under LGPL-3.0 licence which, if i understand correclty, is imcompatible with your package being under Apache-2.0 licence.

For now i'll postpone the update of your package, but i'd like to know if this is indeed a bug, or if you plan to update your licence?