Potential security vulnerabilities found in the eslint-utils and lodash dependencies

[SteadyGiant]

I received these security alerts today:

package-lock.json needs updating.

[kakawait]

@everetr Yes I was working on it, currently many of deps already upgraded on #356 branch, that will be part of next release

[rugk]

Likely also fixed in #435

[kakawait]

fixed by #472