fix: bump lodash for CVE-2018-16487

https://nvd.nist.gov/vuln/detail/CVE-2018-16487

Author: adam-h

package.json

@@ -21,7 +21,7 @@
   "dependencies": {
     "dateformat": "^1.0.6",
     "istanbul": "^0.4.0",
-    "lodash": "^4.17.0",
+    "lodash": "^4.17.11",
     "minimatch": "^3.0.0",
     "source-map": "^0.5.1"
   },