From ca861a63496d074bb4ae2eb22f83dff732b2dadd Mon Sep 17 00:00:00 2001
From: Thodoris Greasidis <thgreasi@gmail.com>
Date: Wed, 28 Nov 2018 20:15:12 +0200
Subject: [PATCH] Fix potential dependency security issue

Until further investigation it is recommended to pin event-stream
to v3.3.4.

Change-type: patch
See: https://github.com/dominictarr/event-stream/issues/116
Signed-off-by: Thodoris Greasidis <thodoris@balena.io>
---
 package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package.json b/package.json
index dba6eb8a..96ae5969 100644
--- a/package.json
+++ b/package.json
@@ -128,7 +128,7 @@
     "drivelist": "^5.0.22",
     "ejs": "^2.5.7",
     "etcher-image-write": "^9.0.3",
-    "event-stream": "3.3.5",
+    "event-stream": "3.3.4",
     "express": "^4.13.3",
     "global-tunnel-ng": "^2.1.1",
     "hasbin": "^1.2.3",