fix: package.json to reduce vulnerabilities (#44)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-LODASH-590103

Author: snyk-bot

CHANGELOG.md

@@ -5,6 +5,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## Unreleased
+### Fixed
+- Upgraded `lodash`
 
 ## 0.4.1 - 2020-06-10
 ### Fixed

package-lock.json

@@ -49,7 +49,7 @@
     "bpk-mixins": "^19.1.20",
     "chokidar": "^3.0.0",
     "fast-glob": "^3.0.0",
-    "lodash": "^4.17.11",
+    "lodash": "^4.17.20",
     "node-sass": "^4.12.0",
     "node-sass-tilde-importer": "^1.0.2",
     "ora": "^4.0.0",