Remove `he` dependency
Remove lodash.foreach from dev dependencies

It's already a regular dependency, so it'll be available for tests
regardless.