fix: .snyk & package.json to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-LODASH-73638
 - https://snyk.io/vuln/SNYK-JS-LODASH-73639
 - https://snyk.io/vuln/npm:braces:20180219
 - https://snyk.io/vuln/npm:clean-css:20180306
 - https://snyk.io/vuln/npm:cli:20160615
 - https://snyk.io/vuln/npm:lodash:20180130
 - https://snyk.io/vuln/npm:minimatch:20160620
 - https://snyk.io/vuln/npm:uglify-js:20151024
 
The following vulnerabilities are fixed with a Snyk patch: