Merge pull request #430 from glennsarti/master

(maint) Pin event-stream due to malicious code

Author: michaeltlombardi

package-lock.json

@@ -441,7 +441,8 @@
     "gulp-downloader": "^1.0.4",
     "gulp-decompress": "^2.0.2",
     "lodash": ">=4.17.5",
-    "cryptiles": ">=4.1.2"
+    "cryptiles": ">=4.1.2",
+    "event-stream": "< 3.3.4"
   },
   "dependencies": {
     "vscode-languageclient": "5.1.0",