fix: package.json, package-lock.json & .snyk to reduce vulnerabilities

The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746

.snyk

@@ -0,0 +1,38 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.14.1
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  SNYK-JS-LODASH-567746:
+    - '@semantic-release/git > lodash':
+        patched: '2020-05-01T01:51:54.456Z'
+    - semantic-release > lodash:
+        patched: '2020-05-01T01:51:54.456Z'
+    - gulp-eslint > eslint > lodash:
+        patched: '2020-05-01T01:51:54.456Z'
+    - mocha > yargs-unparser > lodash:
+        patched: '2020-05-01T01:51:54.456Z'
+    - semantic-release > @semantic-release/release-notes-generator > lodash:
+        patched: '2020-05-01T01:51:54.456Z'
+    - gulp-eslint > eslint > inquirer > lodash:
+        patched: '2020-05-01T01:51:54.456Z'
+    - gulp-eslint > eslint > table > lodash:
+        patched: '2020-05-01T01:51:54.456Z'
+    - gulp-mocha > mocha > yargs-unparser > lodash:
+        patched: '2020-05-01T01:51:54.456Z'
+    - nyc > istanbul-lib-instrument > @babel/core > lodash:
+        patched: '2020-05-01T01:51:54.456Z'
+    - semantic-release > @semantic-release/release-notes-generator > conventional-commits-parser > lodash:
+        patched: '2020-05-01T01:51:54.456Z'
+    - semantic-release > @semantic-release/release-notes-generator > conventional-changelog-writer > lodash:
+        patched: '2020-05-01T01:51:54.456Z'
+    - nyc > istanbul-lib-instrument > @babel/core > @babel/traverse > lodash:
+        patched: '2020-05-01T01:51:54.456Z'
+    - nyc > istanbul-lib-instrument > @babel/core > @babel/helpers > @babel/traverse > lodash:
+        patched: '2020-05-01T01:51:54.456Z'
+    - nyc > istanbul-lib-instrument > @babel/core > @babel/helpers > @babel/traverse > @babel/generator > lodash:
+        patched: '2020-05-01T01:51:54.456Z'
+    - nyc > istanbul-lib-instrument > @babel/core > @babel/helpers > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash:
+        patched: '2020-05-01T01:51:54.456Z'
+    - nyc > istanbul-lib-instrument > @babel/core > @babel/helpers > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash:
+        patched: '2020-05-01T01:51:54.456Z'