Versions of lodash lower than 4.17.21 are being flagged with security vulnerabilities. (see https://snyk.io/vuln/npm:lodash) Bumping the package's lodash dependency version to 4.17.21 solves this 😄