fix: package.json, package-lock.json & .snyk to reduce vulnerabilities

The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746

package.json

@@ -50,7 +50,9 @@
     "precommit": "lint-staged",
     "start-api": "node -r esm src/api/server/index.js",
     "start-store": "node -r esm dist/store/server/index.js",
-    "start": "concurrently npm:start-*"
+    "start": "concurrently npm:start-*",
+    "snyk-protect": "snyk protect",
+    "prepare": "npm run snyk-protect"
   },
   "lint-staged": {
     "*.js": [
@@ -134,10 +136,12 @@
     "webpack-cli": "^3.1.0",
     "winston": "^3.0.0",
     "workbox-webpack-plugin": "^3.4.1",
-    "ws": "^6.0.0"
+    "ws": "^6.0.0",
+    "snyk": "^1.319.0"
   },
   "engines": {
     "node": "^8.0.0",
     "npm": "^5.0.0"
-  }
+  },
+  "snyk": true
 }