fix: package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-LODASH-73638
- https://snyk.io/vuln/SNYK-JS-LODASH-73639

package.json

@@ -63,7 +63,7 @@
     "github-api": "^3.0.0",
     "hammerjs": "^2.0.8",
     "jquery": "^3.1.1",
-    "lodash": "^4.16.4",
+    "lodash": "^4.17.11",
     "mime-types": "^2.1.14",
     "moment": "^2.18.1",
     "mousetrap": "^1.6.1",