diff --git a/packages/nomnom-api/package.json b/packages/nomnom-api/package.json
index 2c3bd6a..4b4f5d4 100644
--- a/packages/nomnom-api/package.json
+++ b/packages/nomnom-api/package.json
@@ -42,7 +42,7 @@
     "graphql": "0.13.2",
     "graphql-tools": "3.0.2",
     "jest": "23.1.0",
-    "jsonwebtoken": "8.2.2",
+    "jsonwebtoken": "9.0.0",
     "knex": "0.19.2",
     "lodash": "4.17.10",
     "mime-types": "2.1.24",
diff --git a/packages/nomnom-api/yarn.lock b/packages/nomnom-api/yarn.lock
index d97e272..1047135 100644
--- a/packages/nomnom-api/yarn.lock
+++ b/packages/nomnom-api/yarn.lock
@@ -1370,7 +1370,7 @@ etag@~1.8.1:
 
 event-stream@~3.3.0:
   version "3.3.4"
-  resolved "http://registry.npmjs.org/event-stream/-/event-stream-3.3.4.tgz#4ab4c9a0f5a54db9338b4c34d86bfce8f4b35571"
+  resolved "https://registry.npmjs.org/event-stream/-/event-stream-3.3.4.tgz#4ab4c9a0f5a54db9338b4c34d86bfce8f4b35571"
   dependencies:
     duplexer "~0.1.1"
     from "~0"