There is a [prototype pollution vulnerability in `lodash`](https://github.com/lodash/lodash/issues/4738), which `lodash`'s maintainers [seem not to be acting on](https://github.com/lodash/lodash/pull/4759). Previously #139.