The version was released 22 days ago. npm has a list of dependents https://www.npmjs.com/browse/depended/event-source-polyfill https://www.npmjs.com/browse/depe

The version was released 22 days ago. npm has a list of dependents https://www.npmjs.com/browse/depended/event-source-polyfill https://www.npmjs.com/browse/depended/event-source-polyfill. Gatsby is the big one, and it doesn't use a lockfile or pin the specific version so any new installation will receive the bad version, but this package is to only be used in development environment https://github.com/gatsbyjs/gatsby/blob/441a5af8e665256c7703854c5c8a4144c2e8e103/packages/gatsby/cache-dir/polyfill-entry.js#L4 https://github.com/gatsbyjs/gatsby/blob/441a5af8e665256c7703....