The component depends on stickyfilljs to provide an Internet Explorer polyfill for position: sticky. However the dependency is unmaintained and itself has a dependeny on an old jQuery version with security vulnerabilities, so it will be flagged by dependency checkers. Since Internet Explorer has been out of support since June 2022, I'd propose removing the dependency on stickyfilljs.