GitHub identified several dependency vulnerabilities in react-io:
https://github.com/postmates/react-io/network/alerts
Please take a look at rev'ing some of these dependencies if possible to address the identified issues. Feel free to reassign this bug as necessary.