tree f8c0665e18420005f88dab11099e9cb867eeebae
parent 1c43b312769fcf9fe4e41bf6d7336402d06bed6e
author Gunnar Mills <gmills@us.ibm.com> 1543347567 -0600
committer Gunnar Mills <gmills@us.ibm.com> 1543353859 -0600

Downgrade event-stream package to 3.3.4

From the phosphor-webui alert:
"The NPM package flatmap-stream is considered malicious.
A malicious actor added this package as a dependency to the NPM
event-stream package in versions 3.3.6 and later. Users of
event-stream are encouraged to downgrade to the last non-malicious
version, 3.3.4."

More information can be found at:
https://github.com/dominictarr/event-stream/issues/116
https://arstechnica.com/information-technology/2018/11/hacker-backdoors-widely-used-open-source-software-to-steal-bitcoin/

Tested: Manually on a Witherspoon.
Change-Id: I2555ee04be69cc42f99cf3a5d18a99a4d5c26324
Signed-off-by: Gunnar Mills <gmills@us.ibm.com>