upgrade lodash; tick version
correct package number