bump dependency lodash from 1.0.1 to 2.4.1