`engine.io-client` has been [recently updated](https://github.com/socketio/engine.io-client/commit/62aca32284b17bd22b68f5e18b8c9c0f235da32f) to 1.6.5 which now depends on `ws` 1.0.1, which fixed a [remote memory disclosure vulnerabily](https://nodesecurity.io/advisories/67). Can you, please, update the dependency in `package.json` and release a new version with this fix?