[Security] Upgrade dependent packages to prevent malicious attack

[chagretes]

Downgrade event-stream to fix this dominictarr/event-stream#116

[lucasdavila]

Thank you for the fixup, I also use this package.

It may be possible to use map-stream directly, like here > https://github.com/AveVlad/gulp-connect/pull/261