Min lodash version should be updated to 4.17.5

There is a security vulnerability for older lodash version. More details here: https://nvd.nist.gov/vuln/detail/CVE-2018-3721

We should perhaps replace lodash.flattendeep with straight lodash - as individual functions does not seem to get updated anymore.

Start by checking the package metadata and locating use of lodash.flattendeep. Determine whether updating the minimum lodash version is sufficient or whether the dependency should be replaced, then verify the dependency tree and run the project's available tests. Done means the vulnerable older lodash version is no longer required.

Written by the indexing model from the issue text.