Looks like fivebeans@1.5.0 > lodash@4.15.0 has security vulnerability. more about the vulterability here: https://snyk.io/vuln/npm:lodash:20180130