fix: package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/npm:lodash:20180130

Latest report for alykoshin/require-dir-all:
https://snyk.io/test/github/alykoshin/require-dir-all

package.json

@@ -54,7 +54,8 @@
   "homepage": "https://github.com/alykoshin/require-dir-all#readme",
   "dependencies": {
     "mini-deep-assign": "0.0.8",
-    "module-parent": "0.0.2"
+    "module-parent": "0.0.2",
+    "lodash": "4.17.5"
   },
   "devDependencies": {
     "chai": "^4.1.2",