lodash is a real dependency, thanks @evil_trout