fix: bump dependencies

[mtrezza]

• bumps dependencies
• reduces vulnerabilities from 4 vulnerabilities (1 low, 2 moderate, 1 high) to 1 low

[mtrezza]

@ToothlessGear could you please review this PR and make a release to fix the vulnerabilities?

[eladnava]

@mtrezza Thanks for your contribution and suggestion!

I believe it would be preferred by @ToothlessGear and @hypesystem if we only were to update those dependencies with vulnerabilities reported by npm audit, which are lodash and mocha (dev).

I've gone forth and updated the dependencies in f268b8b and published to npm in 1.0.5. Thanks for your help!

[mtrezza]

Thanks for the fast release @eladnava, yes that sounds good and I'll keep that in mind for future PRs.

May I suggest to add snyk to this repository to fix vulnerabilities faster and without having to wait for a manual PR? These vulnerabilities were open for quite some time. #354