Update package-lock.json
brunojm opened this issue · comments
The current package-lock.json still have a reference to the event-stream package. More information about this package security issue here: https://blog.npmjs.org/post/180565383195/details-about-the-event-stream-incident
I made a PR for this: #250 if you guys want it.