The version of lodash.js that is used (v4.17.11) has a reported 'High severity vulnerability'. See: https://github.com/lodash/lodash/issues/4348 switch to v4.17.12