Update dependencies.
Normalize package.json.

* Fix `npm test` on Windows
* Use https for the repository
Use lodash directly.
Add missing semicolon.
Add `exclude` option.