fix: package.json, package-lock.json & .snyk to reduce vulnerabilities

The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746

package.json

@@ -27,7 +27,9 @@
     "test": "NODE_ENV=test gulp -LLLL --color test",
     "cover": "rm -rf coverage/ .nyc_output/; NODE_ENV=test nyc gulp -LLLL --color test",
     "coveralls": "cat coverage/lcov.info | coveralls",
-    "prepublishOnly": "npm shrinkwrap"
+    "prepublishOnly": "npm shrinkwrap",
+    "snyk-protect": "snyk protect",
+    "prepare": "npm run snyk-protect"
   },
   "bugs": {
     "url": "https://github.com/randytarampi/pseudolocalize/issues",
@@ -74,9 +76,11 @@
     "sinon": "^9.0.2"
   },
   "dependencies": {
-    "commander": "^5.1.0"
+    "commander": "^5.1.0",
+    "snyk": "^1.316.1"
   },
   "engines": {
     "node": ">=8"
-  }
+  },
+  "snyk": true
 }