underscore doesn't respect semver

See: https://github.com/jashkenas/underscore/issues/1805