diff --git a/package-lock.json b/package-lock.json
index 3a81de7..a3a5b64 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10,16 +10,6 @@
       "integrity": "sha512-V3BIhmY36fXZ1OtVcI9W+FxQqxVLsPKcNjWigIaa81dLC9IolJl5Mt4Cvhmr0flUnjSpTdrbMTSbXqYqV5dT6A==",
       "dev": true
     },
-    "JSONStream": {
-      "version": "1.3.5",
-      "resolved": "https://registry.npmjs.org/JSONStream/-/JSONStream-1.3.5.tgz",
-      "integrity": "sha512-E+iruNOY8VV9s4JEbe1aNEm6MiszPRr/UfcHMz0TQh1BXSxHK+ASV1R6W4HpjBhSeS+54PIsAMCBmwD06LLsqQ==",
-      "dev": true,
-      "requires": {
-        "jsonparse": "^1.2.0",
-        "through": ">=2.2.7 <3"
-      }
-    },
     "abbrev": {
       "version": "1.1.1",
       "resolved": "https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz",
@@ -488,9 +478,9 @@
       "integrity": "sha512-erYug8XoqzU3IfcU8fUgyHqyOXqIE4tUTTQ+7mqUjQlvnXkOO6OlT9c/ZoJVHYoAaqGxr09CN53G7XIsO4KtWA==",
       "dev": true,
       "requires": {
-        "JSONStream": "^1.0.3",
         "combine-source-map": "~0.8.0",
         "defined": "^1.0.0",
+        "JSONStream": "^1.0.3",
         "safe-buffer": "^5.1.1",
         "through2": "^2.0.0",
         "umd": "^3.0.0"
@@ -530,7 +520,6 @@
       "integrity": "sha512-I46tDQNMOh1IOJ+iY+Xtz4aCII9MoXbRvxI028FXJfFeGqzgRQUq6+xVDpi1CQLvNlNxhqX9k07PJx7lcY6AdA==",
       "dev": true,
       "requires": {
-        "JSONStream": "^1.0.3",
         "assert": "~1.3.0",
         "browser-pack": "^5.0.0",
         "browser-resolve": "^1.7.1",
@@ -554,6 +543,7 @@
         "inherits": "~2.0.1",
         "insert-module-globals": "^6.4.1",
         "isarray": "0.0.1",
+        "JSONStream": "^1.0.3",
         "labeled-stream-splicer": "^1.0.0",
         "module-deps": "^3.7.11",
         "os-browserify": "~0.1.1",
@@ -587,9 +577,9 @@
           "integrity": "sha512-BFMQuYXCcwr3Uvna1y1hikqd3r2dQpWIQBIN3m5YwE3ClfnXDeF3tqP6Wqjhs1LRUeBJpgHn8yD+fPX/YSEgMQ==",
           "dev": true,
           "requires": {
-            "JSONStream": "^1.0.3",
             "combine-source-map": "~0.6.1",
             "defined": "^1.0.0",
+            "JSONStream": "^1.0.3",
             "through2": "^1.0.0",
             "umd": "^3.0.0"
           }
@@ -3488,10 +3478,10 @@
       "integrity": "sha512-ryk8hTKUZCc300SPOOwx30WhE5oRUssPDVlIoO8vtoMNBy5HGeesVRl3HF7ra4ll42T0IdnwD9XR9svh6+RRhg==",
       "dev": true,
       "requires": {
-        "JSONStream": "^1.0.3",
         "combine-source-map": "~0.6.1",
         "concat-stream": "~1.4.1",
         "is-buffer": "^1.1.0",
+        "JSONStream": "^1.0.3",
         "lexical-scope": "^1.2.0",
         "process": "~0.11.0",
         "through2": "^1.0.0",
@@ -3704,6 +3694,11 @@
       "integrity": "sha512-cdyMtqX/BOqqNBBiKlIVkytNHm49MtMlYyn1zxzvJKWmFMlGzm+ry5BBfYyeY9YmNKbRSo/o7OX9w9ale0wg3w==",
       "dev": true
     },
+    "is-function": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/is-function/-/is-function-1.0.2.tgz",
+      "integrity": "sha512-lw7DUp0aWXYg+CBCN+JKkcE0Q2RayZnSvnZBlwgxHBQhqt5pZNVy4Ri7H9GmmXkdu7LUthszM+Tor1u/2iBcpQ=="
+    },
     "is-glob": {
       "version": "4.0.3",
       "resolved": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz",
@@ -3991,6 +3986,16 @@
       "integrity": "sha512-p/nXbhSEcu3pZRdkW1OfJhpsVtW1gd4Wa1fnQc9YLiTfAjn0312eMKimbdIQzuZl9aa9xUGaRlP9T/CJE/ditQ==",
       "dev": true
     },
+    "JSONStream": {
+      "version": "1.3.5",
+      "resolved": "https://registry.npmjs.org/JSONStream/-/JSONStream-1.3.5.tgz",
+      "integrity": "sha512-E+iruNOY8VV9s4JEbe1aNEm6MiszPRr/UfcHMz0TQh1BXSxHK+ASV1R6W4HpjBhSeS+54PIsAMCBmwD06LLsqQ==",
+      "dev": true,
+      "requires": {
+        "jsonparse": "^1.2.0",
+        "through": ">=2.2.7 <3"
+      }
+    },
     "jsprim": {
       "version": "1.4.2",
       "resolved": "https://registry.npmjs.org/jsprim/-/jsprim-1.4.2.tgz",
@@ -4653,13 +4658,13 @@
       "integrity": "sha512-EbWWlSGaCVidEsLsSzkY6l/jm0IcGDSQ8tGwtjM8joTrxqxP0om02Px9Np8D7FMZ/vZFdsOGbio+WqkKQxYuTA==",
       "dev": true,
       "requires": {
-        "JSONStream": "^1.0.3",
         "browser-resolve": "^1.7.0",
         "concat-stream": "~1.4.5",
         "defined": "^1.0.0",
         "detective": "^4.0.0",
         "duplexer2": "0.0.2",
         "inherits": "^2.0.1",
+        "JSONStream": "^1.0.3",
         "parents": "^1.0.0",
         "readable-stream": "^1.1.13",
         "resolve": "^1.1.3",
@@ -8491,7 +8496,6 @@
           "integrity": "sha512-TkOR1cQGdmXU9zW4YukWzWVSJwrxmNdADFbqbE3HFgQWe5wqZmOawqZ7J/8MPCwk/W8yY7Y0h+7mOtcZxLP23g==",
           "dev": true,
           "requires": {
-            "JSONStream": "^1.0.3",
             "assert": "^1.4.0",
             "browser-pack": "^6.0.1",
             "browser-resolve": "^2.0.0",
@@ -8513,6 +8517,7 @@
             "https-browserify": "^1.0.0",
             "inherits": "~2.0.1",
             "insert-module-globals": "^7.0.0",
+            "JSONStream": "^1.0.3",
             "labeled-stream-splicer": "^2.0.0",
             "mkdirp-classic": "^0.5.2",
             "module-deps": "^6.2.3",
@@ -8642,11 +8647,11 @@
           "integrity": "sha512-ufS5Qq9RZN+Bu899eA9QCAYThY+gGW7oRkmb0vC93Vlyu/CFGcH0OYPEjVkDXA5FEbTt1+VWzdoOD3Ny9N+8tg==",
           "dev": true,
           "requires": {
-            "JSONStream": "^1.0.3",
             "acorn-node": "^1.5.2",
             "combine-source-map": "^0.8.0",
             "concat-stream": "^1.6.1",
             "is-buffer": "^1.1.0",
+            "JSONStream": "^1.0.3",
             "path-is-absolute": "^1.0.1",
             "process": "~0.11.0",
             "through2": "^2.0.0",
@@ -8679,7 +8684,6 @@
           "integrity": "sha512-fg7OZaQBcL4/L+AK5f4iVqf9OMbCclXfy/znXRxTVhJSeW5AIlS9AwheYwDaXM3lVW7OBeaeUEY3gbaC6cLlSA==",
           "dev": true,
           "requires": {
-            "JSONStream": "^1.0.3",
             "browser-resolve": "^2.0.0",
             "cached-path-relative": "^1.0.2",
             "concat-stream": "~1.6.0",
@@ -8687,6 +8691,7 @@
             "detective": "^5.2.0",
             "duplexer2": "^0.1.2",
             "inherits": "^2.0.1",
+            "JSONStream": "^1.0.3",
             "parents": "^1.0.0",
             "readable-stream": "^2.0.2",
             "resolve": "^1.4.0",
@@ -8840,20 +8845,21 @@
       "dev": true
     },
     "xhr": {
-      "version": "2.1.0",
-      "resolved": "https://registry.npmjs.org/xhr/-/xhr-2.1.0.tgz",
-      "integrity": "sha512-o+FVwhW57NAnU4n3Emcq35w++4tGoK4IWDP4rFkLZjB/UeUJR7PuJKSjq/BuIRYdDvxIISiTtVU2ZiU7IJbd/w==",
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/xhr/-/xhr-2.2.0.tgz",
+      "integrity": "sha512-Np5LbUGDHYxrcj9+vGeHnE/RDrZ8vH5axVkXURq1FmrAU1sVBHmBcnC66TpeBONdZTzf6s/DSI2HqEDF7e0OKg==",
       "requires": {
         "global": "~4.3.0",
+        "is-function": "^1.0.1",
         "once": "~1.1.1",
-        "parse-headers": "^2.0.0"
+        "parse-headers": "^2.0.0",
+        "xtend": "^4.0.0"
       }
     },
     "xtend": {
       "version": "4.0.2",
       "resolved": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz",
-      "integrity": "sha512-LKYU1iAXJXUgAXn9URjiu+MWhyUXHsvfp7mcuYm9dSUKK0/CjtrUwFAxD82/mCWbtLsGjFIad0wIsod4zrTAEQ==",
-      "dev": true
+      "integrity": "sha512-LKYU1iAXJXUgAXn9URjiu+MWhyUXHsvfp7mcuYm9dSUKK0/CjtrUwFAxD82/mCWbtLsGjFIad0wIsod4zrTAEQ=="
     },
     "yallist": {
       "version": "2.1.2",
diff --git a/package.json b/package.json
index 496ff85..f05a022 100644
--- a/package.json
+++ b/package.json
@@ -27,7 +27,7 @@
     "q": "^1.4.1",
     "request": "^2.88.2",
     "vkey": "1.0.0",
-    "xhr": "2.1.0"
+    "xhr": "2.2.0"
   },
   "browser": {
     "q": "./src/lib/promises-browser.js",