move to lodash
update dependencies