Review dependencies changes to prevent supply chain attack
A very simple helper library for keeping track of locations in tokenized text.