fix: .snyk & package.json to reduce vulnerabilities

The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746

package.json

@@ -11,7 +11,9 @@
     "codeclimate": "codeclimate-test-reporter < coverage/lcov.info",
     "release:major": "changelog -M && git add CHANGELOG.md && git commit -m 'updated CHANGELOG.md' && npm version major && git push origin && git push origin --tags && npm publish",
     "release:minor": "changelog -m && git add CHANGELOG.md && git commit -m 'updated CHANGELOG.md' && npm version minor && git push origin && git push origin --tags && npm publish",
-    "release:patch": "changelog -p && git add CHANGELOG.md && git commit -m 'updated CHANGELOG.md' && npm version patch && git push origin && git push origin --tags && npm publish"
+    "release:patch": "changelog -p && git add CHANGELOG.md && git commit -m 'updated CHANGELOG.md' && npm version patch && git push origin && git push origin --tags && npm publish",
+    "snyk-protect": "snyk protect",
+    "prepare": "yarn run snyk-protect"
   },
   "engines": {
     "node": ">=4"
@@ -35,7 +37,8 @@
   "dependencies": {
     "geo.what3words": "^2.0.0",
     "iso-639-1": "^1.3.0",
-    "node-geocoder": "^3.15.2"
+    "node-geocoder": "^3.15.2",
+    "snyk": "^1.319.0"
   },
   "devDependencies": {
     "chai": "4.2.0",
@@ -49,5 +52,6 @@
     "istanbul": "0.4.5",
     "mocha": "5.2.0",
     "proxyquire": "1.8.0"
-  }
+  },
+  "snyk": true
 }