Merge pull request #1394 from rajivshah3/fix/event-stream

Lock event-stream to 3.3.4 to avoid malware injection