This library has a dependency on ps-tree, which has a dependency on event-stream which had a security bug in newer versions.
Hence locked ps-tree's version to 1.1.1 which uses event-stream's secure version 3.3.4
For more details, please refer:
indexzero/ps-tree#33
dominictarr/event-stream#116