Merge pull request #1394 from rajivshah3/fix/event-stream

Lock event-stream to 3.3.4 to avoid malware injection
diff --git a/package.json b/package.json
index 925def4..8234a3d 100644
--- a/package.json
+++ b/package.json
@@ -19,7 +19,7 @@
     "export"
   ],
   "devDependencies": {
-    "event-stream": "^3.3.4",
+    "event-stream": "3.3.4",
     "events-stream": "^0.2.0",
     "gulp": "^3.9.1",
     "gulp-batch-replace": "0.0.0",