fix: src/package.json & src/package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-UNDERSCORE-1080984

Author: snyk-bot

src/package-lock.json

@@ -70,7 +70,7 @@
     "tiny-worker": "^2.3.0",
     "tinycon": "0.6.8",
     "ueberdb2": "^1.4.4",
-    "underscore": "1.12.0",
+    "underscore": "1.12.1",
     "unorm": "1.6.0",
     "wtfnode": "^0.8.4"
   },