fix: package.json, package-lock.json & .snyk to reduce vulnerabilities

The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746

package.json

@@ -225,7 +225,8 @@
     "uuid": "^3.1.0",
     "which": "^1.3.0",
     "winston": "^2.4.0",
-    "yaml-front-matter": "3.4.1"
+    "yaml-front-matter": "3.4.1",
+    "snyk": "^1.319.1"
   },
   "activationHooks": [
     "core:loaded-shell-environment"
@@ -464,11 +465,12 @@
   "scripts": {
     "build-options": "node script/build-options.js",
     "docs": "npm run build-options && coffee docs/",
-    "prepare": "npm run docs",
+    "prepare": "npm run snyk-protect && npm run docs",
     "lint": "coffeelint src/ spec/",
     "code-docs": "codo && open docs/code/index.html",
     "pretest": "npm run lint",
-    "test": "atom --test spec"
+    "test": "atom --test spec",
+    "snyk-protect": "snyk protect"
   },
   "config": {
     "next-update": {
@@ -493,5 +495,6 @@
       "underscore-plus",
       "prettydiff2"
     ]
-  }
+  },
+  "snyk": true
 }