The ps-tree package may be unsafe now. Better find an alternative.

[haoqunjiang]

See:
indexzero/ps-tree#33
dominictarr/event-stream#116

[indexzero]

FYI [email protected] locked to [email protected] (which if I read this thread correctly pre-dates the questionable changes).

Thanks to folks for bringing it to my attention: indexzero/ps-tree#34

[jbgraug]

"start-server-and-test": "^1.7.4" Is vulnerable...
A workaround is to include this in you package.json (works only with Yarn)

"resolutions": {
    "event-stream": "3.3.4"
  },

[dervism]

It's also possible to add the following to the dependencies to lock the affected package to a safe version:

"dependencies": {
     "event-stream": "=3.3.4"
  }

[bahmutov]

so right now this package uses [email protected] which uses [email protected] which I believe is safe

$ npm ls event-stream
[email protected] /Users/gleb/git/start-server-and-test
└─┬ [email protected]
  └── [email protected]

If any other changes is necessary, please let me know