User of this package might be affected by malicious flatmap-stream?

[amoshydra]

This package has a dependency on event-stream: "~3.3.0" which may acquire the affected "3.3.6".

See: https://github.com/dominictarr/event-stream/issues/116#issue-382854428

User of gulp-flowtype should take note of this issue?

You may use this command to check if you are affect by this issue

npm ls event-stream flatmap-stream