Use lodash directly and add `exclude` option

This fixes #9.

I'll rebase this when the other PR is merged.