diff --git a/apps/api/package.json b/apps/api/package.json
index ee77bf3d..de43a7d1 100644
--- a/apps/api/package.json
+++ b/apps/api/package.json
@@ -52,6 +52,7 @@
     "helmet": "^7.1.0",
     "ioredis": "^5.6.1",
     "js-yaml": "^4.1.0",
+    "lodash": "^4.18.1",
     "lru-cache": "^7.18.3",
     "marked": "^16.2.0",
     "morgan": "^1.10.0",
@@ -88,4 +89,3 @@
     "uuid": "^9.0.1"
   }
 }
-
diff --git a/apps/web/package.json b/apps/web/package.json
index 64786feb..b13e747c 100644
--- a/apps/web/package.json
+++ b/apps/web/package.json
@@ -20,6 +20,7 @@
     "@supabase/supabase-js": "^2.50.0",
     "@types/marked": "^5.0.2",
     "ioredis": "^5.6.1",
+    "lodash": "^4.18.1",
     "marked": "^16.2.0",
     "next": "^14.2.35",
     "node-fetch": "^2.7.0",
@@ -47,4 +48,3 @@
     "typescript": "^5.3.3"
   }
 }
-
diff --git a/package-lock.json b/package-lock.json
index 914d1037..8a83c6fe 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -16,7 +16,7 @@
         "@modelcontextprotocol/sdk": "^1.25.2",
         "@supabase/supabase-js": "^2.49.4",
         "axios": "0.30.2",
-        "lodash": "4.17.15",
+        "lodash": "4.18.1",
         "yaml": "^2.3.1"
       },
       "devDependencies": {
@@ -41,7 +41,6 @@
         "@codequal/core": "*",
         "@codequal/database": "*",
         "@kubernetes/client-node": "^1.3.0",
-        "@modelcontextprotocol/sdk": "^1.25.2",
         "@supabase/supabase-js": "^2.50.0",
         "@types/js-yaml": "^4.0.9",
         "@types/marked": "^5.0.2",
@@ -58,6 +57,7 @@
         "helmet": "^7.1.0",
         "ioredis": "^5.6.1",
         "js-yaml": "^4.1.0",
+        "lodash": "^4.18.1",
         "lru-cache": "^7.18.3",
         "marked": "^16.2.0",
         "morgan": "^1.10.0",
@@ -734,7 +734,6 @@
       "dependencies": {
         "@headlessui/react": "^1.7.17",
         "@heroicons/react": "^2.0.18",
-        "@modelcontextprotocol/sdk": "^1.25.2",
         "@stripe/react-stripe-js": "^2.4.0",
         "@stripe/stripe-js": "^2.2.0",
         "@supabase/auth-helpers-nextjs": "^0.8.7",
@@ -742,6 +741,7 @@
         "@supabase/supabase-js": "^2.50.0",
         "@types/marked": "^5.0.2",
         "ioredis": "^5.6.1",
+        "lodash": "^4.18.1",
         "marked": "^16.2.0",
         "next": "^14.2.35",
         "node-fetch": "^2.7.0",
@@ -13148,9 +13148,9 @@
       }
     },
     "node_modules/lodash": {
-      "version": "4.17.15",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
-      "integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
+      "version": "4.18.1",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz",
+      "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==",
       "license": "MIT"
     },
     "node_modules/lodash-es": {
@@ -19532,7 +19532,6 @@
       "dependencies": {
         "@anthropic-ai/sdk": "^0.32.1",
         "@google/generative-ai": "^0.21.0",
-        "@modelcontextprotocol/sdk": "^1.25.2",
         "@supabase/supabase-js": "^2.57.4",
         "axios": "^1.6.0",
         "cron": "^3.1.7",
@@ -19550,7 +19549,7 @@
         "@types/jsonwebtoken": "^9.0.10",
         "@types/node": "^20.0.0",
         "@types/xml2js": "^0.4.14",
-        "lodash": "^4.17.19",
+        "lodash": "^4.18.1",
         "typescript": "^5.0.0"
       }
     },
@@ -19565,13 +19564,6 @@
         "proxy-from-env": "^1.1.0"
       }
     },
-    "packages/agents/node_modules/lodash": {
-      "version": "4.17.21",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
-      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==",
-      "dev": true,
-      "license": "MIT"
-    },
     "packages/agents/node_modules/node-cron": {
       "version": "3.0.3",
       "license": "ISC",
@@ -19595,7 +19587,6 @@
       "dependencies": {
         "@codequal/database": "0.1.0",
         "@kubernetes/client-node": "^1.3.0",
-        "@modelcontextprotocol/sdk": "^1.25.2",
         "@supabase/supabase-js": "^2.50.0",
         "@types/marked": "^5.0.2",
         "@types/node-cron": "^3.0.11",
@@ -19603,6 +19594,7 @@
         "dotenv": "^16.5.0",
         "express": "^4.21.1",
         "ioredis": "^5.6.1",
+        "lodash": "^4.18.1",
         "marked": "^16.2.0",
         "node-cron": "^4.1.0",
         "node-fetch": "^2.7.0",
@@ -20070,13 +20062,13 @@
       "version": "0.1.0",
       "dependencies": {
         "@kubernetes/client-node": "^1.3.0",
-        "@modelcontextprotocol/sdk": "^1.25.2",
         "@supabase/supabase-js": "^2.50.0",
         "@types/marked": "^5.0.2",
         "@types/node-cron": "^3.0.11",
         "axios": "^1.10.0",
         "dotenv": "^16.5.0",
         "ioredis": "^5.6.1",
+        "lodash": "^4.18.1",
         "marked": "^16.2.0",
         "node-cron": "^4.1.0",
         "node-fetch": "^2.7.0",
@@ -20189,7 +20181,6 @@
       "dependencies": {
         "@codequal/core": "file:../core",
         "@eslint/mcp": "^0.1.0",
-        "@modelcontextprotocol/sdk": "^1.25.2",
         "@types/marked": "^5.0.2",
         "axios": "^1.10.0",
         "better-npm-audit": "^3.7.0",
@@ -20199,6 +20190,7 @@
         "jscpd": "^4.0.5",
         "license-checker": "^25.0.1",
         "lighthouse": "^12.8.2",
+        "lodash": "^4.18.1",
         "madge": "^7.0.0",
         "marked": "^16.2.0",
         "node-fetch": "^2.7.0",
@@ -20239,13 +20231,13 @@
         "@codequal/core": "*",
         "@codequal/database": "*",
         "@kubernetes/client-node": "^1.3.0",
-        "@modelcontextprotocol/sdk": "^1.25.2",
         "@supabase/supabase-js": "^2.50.0",
         "@types/marked": "^5.0.2",
         "@types/node-cron": "^3.0.11",
         "axios": "^1.10.0",
         "dotenv": "^16.5.0",
         "ioredis": "^5.6.1",
+        "lodash": "^4.18.1",
         "marked": "^16.2.0",
         "node-cron": "^4.1.0",
         "node-fetch": "^2.7.0",
@@ -20553,13 +20545,13 @@
       "license": "ISC",
       "dependencies": {
         "@kubernetes/client-node": "^1.3.0",
-        "@modelcontextprotocol/sdk": "^1.25.2",
         "@supabase/supabase-js": "^2.50.0",
         "@types/marked": "^5.0.2",
         "@types/node-cron": "^3.0.11",
         "axios": "^1.10.0",
         "dotenv": "^16.5.0",
         "ioredis": "^5.6.1",
+        "lodash": "^4.18.1",
         "marked": "^16.2.0",
         "node-cron": "^4.1.0",
         "node-fetch": "^2.7.0",
@@ -20863,7 +20855,7 @@
       "name": "codequal-autofix",
       "version": "0.1.0",
       "dependencies": {
-        "@modelcontextprotocol/sdk": "^1.25.2"
+        "lodash": "^4.18.1"
       },
       "devDependencies": {
         "@types/node": "^20.0.0",
diff --git a/package.json b/package.json
index 595d7aeb..5e565587 100644
--- a/package.json
+++ b/package.json
@@ -83,7 +83,7 @@
     "@modelcontextprotocol/sdk": "^1.25.2",
     "@supabase/supabase-js": "^2.49.4",
     "yaml": "^2.3.1",
-    "lodash": "4.17.15",
+    "lodash": "4.18.1",
     "axios": "0.30.2"
   },
   "packageManager": "npm@10.8.2"
diff --git a/packages/agents/package.json b/packages/agents/package.json
index 1439bb70..18224325 100644
--- a/packages/agents/package.json
+++ b/packages/agents/package.json
@@ -105,8 +105,7 @@
     "@types/jsonwebtoken": "^9.0.10",
     "@types/node": "^20.0.0",
     "@types/xml2js": "^0.4.14",
-    "lodash": "^4.17.19",
+    "lodash": "^4.18.1",
     "typescript": "^5.0.0"
   }
 }
-
diff --git a/packages/core/package.json b/packages/core/package.json
index c846ca7b..6197f32c 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -109,6 +109,7 @@
     "dotenv": "^16.5.0",
     "express": "^4.21.1",
     "ioredis": "^5.6.1",
+    "lodash": "^4.18.1",
     "marked": "^16.2.0",
     "node-cron": "^4.1.0",
     "node-fetch": "^2.7.0",
@@ -138,4 +139,3 @@
     "typescript": "^5.0.0"
   }
 }
-
diff --git a/packages/database/package.json b/packages/database/package.json
index 6724bf95..f19d1bea 100644
--- a/packages/database/package.json
+++ b/packages/database/package.json
@@ -26,6 +26,7 @@
     "axios": "^1.10.0",
     "dotenv": "^16.5.0",
     "ioredis": "^5.6.1",
+    "lodash": "^4.18.1",
     "marked": "^16.2.0",
     "node-cron": "^4.1.0",
     "node-fetch": "^2.7.0",
@@ -48,4 +49,3 @@
     "typescript": "^5.0.0"
   }
 }
-
diff --git a/packages/mcp-hybrid/package.json b/packages/mcp-hybrid/package.json
index fac343c9..93e48332 100644
--- a/packages/mcp-hybrid/package.json
+++ b/packages/mcp-hybrid/package.json
@@ -32,6 +32,7 @@
     "jscpd": "^4.0.5",
     "license-checker": "^25.0.1",
     "lighthouse": "^12.8.2",
+    "lodash": "^4.18.1",
     "madge": "^7.0.0",
     "marked": "^16.2.0",
     "node-fetch": "^2.7.0",
diff --git a/packages/testing/package.json b/packages/testing/package.json
index a18fcbaa..f42f611b 100644
--- a/packages/testing/package.json
+++ b/packages/testing/package.json
@@ -34,6 +34,7 @@
     "axios": "^1.10.0",
     "dotenv": "^16.5.0",
     "ioredis": "^5.6.1",
+    "lodash": "^4.18.1",
     "marked": "^16.2.0",
     "node-cron": "^4.1.0",
     "node-fetch": "^2.7.0",
@@ -56,4 +57,3 @@
     "typescript": "^5.0.0"
   }
 }
-
diff --git a/packages/ui/package.json b/packages/ui/package.json
index f75a9de4..1949e571 100644
--- a/packages/ui/package.json
+++ b/packages/ui/package.json
@@ -23,6 +23,7 @@
     "axios": "^1.10.0",
     "dotenv": "^16.5.0",
     "ioredis": "^5.6.1",
+    "lodash": "^4.18.1",
     "marked": "^16.2.0",
     "node-cron": "^4.1.0",
     "node-fetch": "^2.7.0",
@@ -42,4 +43,3 @@
     "ts-jest": "^29.1.1"
   }
 }
-
diff --git a/packages/vscode-extension/package.json b/packages/vscode-extension/package.json
index 72e879f2..04ba0492 100644
--- a/packages/vscode-extension/package.json
+++ b/packages/vscode-extension/package.json
@@ -175,5 +175,8 @@
         "eslint": "^8.50.0",
         "ts-node": "^10.9.2",
         "typescript": "^5.2.0"
+    },
+    "dependencies": {
+        "lodash": "^4.18.1"
     }
 }