lock underscore to 1.0.1