Lodash 3.10.1 in dependencies has a security issue

[benoitguigal]

(https://nvd.nist.gov/vuln/detail/CVE-2018-3721)[https://nvd.nist.gov/vuln/detail/CVE-2018-3721]
Please update to version > 4.17.5

[joshribakoff-sm]

I don't think the security issue is really that much of a "security" issue, but I will say that this would be good to fix because this project cannot [easily] be used in a project that is using Lodash v4, it gives a bunch of errors like:
Module not found: Error: Can't resolve 'lodash/collection/shuffle'