remove direct dep on event-stream: malisious version was unpublished

2 files changed, 39 insertions, 126 deletions

diff --git a/editors/code/package-lock.json b/editors/code/package-lock.json
index e74fd2a63d8..0b6d7291714 100644
--- a/editors/code/package-lock.json
+++ b/editors/code/package-lock.json
@@ -437,7 +437,7 @@
         },
         "css-select": {
             "version": "1.2.0",
-            "resolved": "http://registry.npmjs.org/css-select/-/css-select-1.2.0.tgz",
+            "resolved": "https://registry.npmjs.org/css-select/-/css-select-1.2.0.tgz",
             "integrity": "sha1-KzoRBTnFNV8c2NMUYj6HCxIeyFg=",
             "dev": true,
             "requires": {
@@ -473,7 +473,7 @@
         },
         "deep-assign": {
             "version": "1.0.0",
-            "resolved": "http://registry.npmjs.org/deep-assign/-/deep-assign-1.0.0.tgz",
+            "resolved": "https://registry.npmjs.org/deep-assign/-/deep-assign-1.0.0.tgz",
             "integrity": "sha1-sJJ0O+hCfcYh6gBnzex+cN0Z83s=",
             "dev": true,
             "requires": {
@@ -519,7 +519,7 @@
             "dependencies": {
                 "domelementtype": {
                     "version": "1.1.3",
-                    "resolved": "http://registry.npmjs.org/domelementtype/-/domelementtype-1.1.3.tgz",
+                    "resolved": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.1.3.tgz",
                     "integrity": "sha1-vSh3PiZCiBrsUVRJJCmcXNgiGFs=",
                     "dev": true
                 }
@@ -553,7 +553,8 @@
         "duplexer": {
             "version": "0.1.1",
             "resolved": "http://registry.npmjs.org/duplexer/-/duplexer-0.1.1.tgz",
-            "integrity": "sha1-rOb/gIwc5mtX0ev5eXessCM0z8E="
+            "integrity": "sha1-rOb/gIwc5mtX0ev5eXessCM0z8E=",
+            "dev": true
         },
         "duplexify": {
             "version": "3.6.1",
@@ -637,16 +638,17 @@
             "dev": true
         },
         "event-stream": {
-            "version": "4.0.1",
-            "resolved": "https://registry.npmjs.org/event-stream/-/event-stream-4.0.1.tgz",
-            "integrity": "sha512-qACXdu/9VHPBzcyhdOWR5/IahhGMf0roTeZJfzz077GwylcDd90yOHLouhmv7GJ5XzPi6ekaQWd8AvPP2nOvpA==",
+            "version": "3.3.4",
+            "resolved": "http://registry.npmjs.org/event-stream/-/event-stream-3.3.4.tgz",
+            "integrity": "sha1-SrTJoPWlTbkzi0w02Gv86PSzVXE=",
+            "dev": true,
             "requires": {
                 "duplexer": "0.1.1",
                 "from": "0.1.7",
-                "map-stream": "0.0.7",
+                "map-stream": "0.1.0",
                 "pause-stream": "0.0.11",
-                "split": "1.0.1",
-                "stream-combiner": "0.2.2",
+                "split": "0.3.3",
+                "stream-combiner": "0.0.4",
                 "through": "2.3.8"
             }
         },
@@ -748,7 +750,8 @@
         "from": {
             "version": "0.1.7",
             "resolved": "https://registry.npmjs.org/from/-/from-0.1.7.tgz",
-            "integrity": "sha1-g8YK/Fi5xWmXAH7Rp2izqzA6RP4="
+            "integrity": "sha1-g8YK/Fi5xWmXAH7Rp2izqzA6RP4=",
+            "dev": true
         },
         "fs-mkdirp-stream": {
             "version": "1.0.0",
@@ -925,13 +928,13 @@
                 },
                 "string_decoder": {
                     "version": "0.10.31",
-                    "resolved": "http://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz",
+                    "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz",
                     "integrity": "sha1-YuIDvEF2bGwoyfyEMB2rHFMQ+pQ=",
                     "dev": true
                 },
                 "through2": {
                     "version": "0.6.5",
-                    "resolved": "http://registry.npmjs.org/through2/-/through2-0.6.5.tgz",
+                    "resolved": "https://registry.npmjs.org/through2/-/through2-0.6.5.tgz",
                     "integrity": "sha1-QaucZ7KdVyCQcUEOHXp6lozTrUg=",
                     "dev": true,
                     "requires": {
@@ -966,45 +969,6 @@
                     "integrity": "sha1-s3gt/4u1R04Yuba/D9/ngvh3doA=",
                     "dev": true
                 },
-                "event-stream": {
-                    "version": "3.3.4",
-                    "resolved": "http://registry.npmjs.org/event-stream/-/event-stream-3.3.4.tgz",
-                    "integrity": "sha1-SrTJoPWlTbkzi0w02Gv86PSzVXE=",
-                    "dev": true,
-                    "requires": {
-                        "duplexer": "0.1.1",
-                        "from": "0.1.7",
-                        "map-stream": "0.1.0",
-                        "pause-stream": "0.0.11",
-                        "split": "0.3.3",
-                        "stream-combiner": "0.0.4",
-                        "through": "2.3.8"
-                    }
-                },
-                "map-stream": {
-                    "version": "0.1.0",
-                    "resolved": "http://registry.npmjs.org/map-stream/-/map-stream-0.1.0.tgz",
-                    "integrity": "sha1-5WqpTEyAVaFkBKBnS3jyFffI4ZQ=",
-                    "dev": true
-                },
-                "split": {
-                    "version": "0.3.3",
-                    "resolved": "http://registry.npmjs.org/split/-/split-0.3.3.tgz",
-                    "integrity": "sha1-zQ7qXmOiEd//frDwkcQTPi0N0o8=",
-                    "dev": true,
-                    "requires": {
-                        "through": "2.3.8"
-                    }
-                },
-                "stream-combiner": {
-                    "version": "0.0.4",
-                    "resolved": "http://registry.npmjs.org/stream-combiner/-/stream-combiner-0.0.4.tgz",
-                    "integrity": "sha1-TV5DPBhSYd3mI8o/RMWGvPXErRQ=",
-                    "dev": true,
-                    "requires": {
-                        "duplexer": "0.1.1"
-                    }
-                },
                 "vinyl": {
                     "version": "2.2.0",
                     "resolved": "https://registry.npmjs.org/vinyl/-/vinyl-2.2.0.tgz",
@@ -1027,7 +991,7 @@
             "integrity": "sha512-0QfbCH2a1k2qkTLWPqTX+QO4qNsHn3kC546YhAP3/n0h+nvtyGITDuDrYBMDZeW4WnFijmkOvBWa5HshTic1tw==",
             "dev": true,
             "requires": {
-                "event-stream": "3.3.5",
+                "event-stream": "3.3.4",
                 "streamifier": "0.1.1",
                 "tar": "2.2.1",
                 "through2": "2.0.5",
@@ -1040,21 +1004,6 @@
                     "integrity": "sha1-2jCcwmPfFZlMaIypAheco8fNfH4=",
                     "dev": true
                 },
-                "event-stream": {
-                    "version": "3.3.5",
-                    "resolved": "https://registry.npmjs.org/event-stream/-/event-stream-3.3.5.tgz",
-                    "integrity": "sha512-vyibDcu5JL20Me1fP734QBH/kenBGLZap2n0+XXM7mvuUPzJ20Ydqj1aKcIeMdri1p+PU+4yAKugjN8KCVst+g==",
-                    "dev": true,
-                    "requires": {
-                        "duplexer": "0.1.1",
-                        "from": "0.1.7",
-                        "map-stream": "0.0.7",
-                        "pause-stream": "0.0.11",
-                        "split": "1.0.1",
-                        "stream-combiner": "0.2.2",
-                        "through": "2.3.8"
-                    }
-                },
                 "replace-ext": {
                     "version": "0.0.1",
                     "resolved": "https://registry.npmjs.org/replace-ext/-/replace-ext-0.0.1.tgz",
@@ -1101,45 +1050,6 @@
                     "integrity": "sha1-s3gt/4u1R04Yuba/D9/ngvh3doA=",
                     "dev": true
                 },
-                "event-stream": {
-                    "version": "3.3.4",
-                    "resolved": "http://registry.npmjs.org/event-stream/-/event-stream-3.3.4.tgz",
-                    "integrity": "sha1-SrTJoPWlTbkzi0w02Gv86PSzVXE=",
-                    "dev": true,
-                    "requires": {
-                        "duplexer": "0.1.1",
-                        "from": "0.1.7",
-                        "map-stream": "0.1.0",
-                        "pause-stream": "0.0.11",
-                        "split": "0.3.3",
-                        "stream-combiner": "0.0.4",
-                        "through": "2.3.8"
-                    }
-                },
-                "map-stream": {
-                    "version": "0.1.0",
-                    "resolved": "http://registry.npmjs.org/map-stream/-/map-stream-0.1.0.tgz",
-                    "integrity": "sha1-5WqpTEyAVaFkBKBnS3jyFffI4ZQ=",
-                    "dev": true
-                },
-                "split": {
-                    "version": "0.3.3",
-                    "resolved": "http://registry.npmjs.org/split/-/split-0.3.3.tgz",
-                    "integrity": "sha1-zQ7qXmOiEd//frDwkcQTPi0N0o8=",
-                    "dev": true,
-                    "requires": {
-                        "through": "2.3.8"
-                    }
-                },
-                "stream-combiner": {
-                    "version": "0.0.4",
-                    "resolved": "http://registry.npmjs.org/stream-combiner/-/stream-combiner-0.0.4.tgz",
-                    "integrity": "sha1-TV5DPBhSYd3mI8o/RMWGvPXErRQ=",
-                    "dev": true,
-                    "requires": {
-                        "duplexer": "0.1.1"
-                    }
-                },
                 "vinyl": {
                     "version": "2.2.0",
                     "resolved": "https://registry.npmjs.org/vinyl/-/vinyl-2.2.0.tgz",
@@ -1421,7 +1331,7 @@
         },
         "kind-of": {
             "version": "1.1.0",
-            "resolved": "http://registry.npmjs.org/kind-of/-/kind-of-1.1.0.tgz",
+            "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-1.1.0.tgz",
             "integrity": "sha1-FAo9LUGjbS78+pN3tiwk+ElaXEQ=",
             "dev": true
         },
@@ -1485,9 +1395,10 @@
             "dev": true
         },
         "map-stream": {
-            "version": "0.0.7",
-            "resolved": "https://registry.npmjs.org/map-stream/-/map-stream-0.0.7.tgz",
-            "integrity": "sha1-ih8HiW2CsQkmvTdEokIACfiJdKg="
+            "version": "0.1.0",
+            "resolved": "http://registry.npmjs.org/map-stream/-/map-stream-0.1.0.tgz",
+            "integrity": "sha1-5WqpTEyAVaFkBKBnS3jyFffI4ZQ=",
+            "dev": true
         },
         "markdown-it": {
             "version": "8.4.2",
@@ -1724,13 +1635,13 @@
         },
         "os-homedir": {
             "version": "1.0.2",
-            "resolved": "http://registry.npmjs.org/os-homedir/-/os-homedir-1.0.2.tgz",
+            "resolved": "https://registry.npmjs.org/os-homedir/-/os-homedir-1.0.2.tgz",
             "integrity": "sha1-/7xJiDNuDoM94MFox+8VISGqf7M=",
             "dev": true
         },
         "os-tmpdir": {
             "version": "1.0.2",
-            "resolved": "http://registry.npmjs.org/os-tmpdir/-/os-tmpdir-1.0.2.tgz",
+            "resolved": "https://registry.npmjs.org/os-tmpdir/-/os-tmpdir-1.0.2.tgz",
             "integrity": "sha1-u+Z0BseaqFxc/sdm/lc0VV36EnQ=",
             "dev": true
         },
@@ -1746,7 +1657,7 @@
         },
         "parse-semver": {
             "version": "1.1.1",
-            "resolved": "http://registry.npmjs.org/parse-semver/-/parse-semver-1.1.1.tgz",
+            "resolved": "https://registry.npmjs.org/parse-semver/-/parse-semver-1.1.1.tgz",
             "integrity": "sha1-mkr9bfBj3Egm+T+6SpnPIj9mbLg=",
             "dev": true,
             "requires": {
@@ -1784,6 +1695,7 @@
             "version": "0.0.11",
             "resolved": "http://registry.npmjs.org/pause-stream/-/pause-stream-0.0.11.tgz",
             "integrity": "sha1-/lo0sMvOErWqaitAPuLnO2AvFEU=",
+            "dev": true,
             "requires": {
                 "through": "2.3.8"
             }
@@ -2033,9 +1945,10 @@
             }
         },
         "split": {
-            "version": "1.0.1",
-            "resolved": "https://registry.npmjs.org/split/-/split-1.0.1.tgz",
-            "integrity": "sha512-mTyOoPbrivtXnwnIxZRFYRrPNtEFKlpB2fvjSnCQUiAA6qAZzqwna5envK4uk6OIeP17CsdF3rSBGYVBsU0Tkg==",
+            "version": "0.3.3",
+            "resolved": "http://registry.npmjs.org/split/-/split-0.3.3.tgz",
+            "integrity": "sha1-zQ7qXmOiEd//frDwkcQTPi0N0o8=",
+            "dev": true,
             "requires": {
                 "through": "2.3.8"
             }
@@ -2070,12 +1983,12 @@
             "dev": true
         },
         "stream-combiner": {
-            "version": "0.2.2",
-            "resolved": "http://registry.npmjs.org/stream-combiner/-/stream-combiner-0.2.2.tgz",
-            "integrity": "sha1-rsjLrBd7Vrb0+kec7YwZEs7lKFg=",
+            "version": "0.0.4",
+            "resolved": "http://registry.npmjs.org/stream-combiner/-/stream-combiner-0.0.4.tgz",
+            "integrity": "sha1-TV5DPBhSYd3mI8o/RMWGvPXErRQ=",
+            "dev": true,
             "requires": {
-                "duplexer": "0.1.1",
-                "through": "2.3.8"
+                "duplexer": "0.1.1"
             }
         },
         "stream-shift": {
@@ -2154,7 +2067,7 @@
         },
         "tar": {
             "version": "2.2.1",
-            "resolved": "http://registry.npmjs.org/tar/-/tar-2.2.1.tgz",
+            "resolved": "https://registry.npmjs.org/tar/-/tar-2.2.1.tgz",
             "integrity": "sha1-jk0qJWwOIYXGsYrWlK7JaLg8sdE=",
             "dev": true,
             "requires": {
@@ -2166,7 +2079,8 @@
         "through": {
             "version": "2.3.8",
             "resolved": "http://registry.npmjs.org/through/-/through-2.3.8.tgz",
-            "integrity": "sha1-DdTJ/6q8NXlgsbckEV1+Doai4fU="
+            "integrity": "sha1-DdTJ/6q8NXlgsbckEV1+Doai4fU=",
+            "dev": true
         },
         "through2": {
             "version": "2.0.5",
@@ -2334,7 +2248,7 @@
             "dependencies": {
                 "underscore": {
                     "version": "1.8.3",
-                    "resolved": "http://registry.npmjs.org/underscore/-/underscore-1.8.3.tgz",
+                    "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.8.3.tgz",
                     "integrity": "sha1-Tz+1OxBuYJf8+ctBCfKl6b36UCI=",
                     "dev": true
                 }
diff --git a/editors/code/package.json b/editors/code/package.json
index b212e159d41..f196ecc6058 100644
--- a/editors/code/package.json
+++ b/editors/code/package.json
@@ -31,7 +31,6 @@
         "singleQuote": true
     },
     "dependencies": {
-        "event-stream": "^4.0.1",
         "vscode-languageclient": "^5.1.1"
     },
     "devDependencies": {