fix: package.json & package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746

Author: snyk-bot

package-lock.json

@@ -26,7 +26,7 @@
         "prepublishOnly": "npm run transpile"
     },
     "dependencies": {
-        "lodash": "^4.17.15"
+        "lodash": "^4.17.16"
     },
     "peerDependencies": {
         "react": "^16.0.0",