Fix lodash prototype pollution vulnerability (#61)

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

Author: dggrunzweig

package.json

@@ -22,6 +22,7 @@
     "prepublishOnly": "yarn build"
   },
   "resolutions": {
+    "lodash": "4.17.23",
     "cross-spawn": "7.0.5",
     "dset": "3.1.4",
     "micromatch": "4.0.8",