fix: package.json, yarn.lock & .snyk to reduce vulnerabilities

The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746

.snyk

@@ -0,0 +1,8 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.15.0
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  SNYK-JS-LODASH-567746:
+    - lodash:
+        patched: '2020-06-16T05:18:19.258Z'

package.json

@@ -28,7 +28,8 @@
     "nunjucks": "^3.2.1",
     "prismjs": "^1.20.0",
     "sockjs": "^0.3.20",
-        "systeminformation": "^4.26.5"
+    "systeminformation": "^4.26.5",
+    "snyk": "^1.341.1"
   },
   "devDependencies": {
     "eslint": "^6.8.0",
@@ -44,7 +45,9 @@
     "build:all": "cd ui && yarn && yarn build:production && cd .. && yarn && yarn build:production",
     "start": "node hydro/loader.js",
     "pack": "pkg .",
-        "lint": "eslint build hydro module tool --fix"
+    "lint": "eslint build hydro module tool --fix",
+    "snyk-protect": "snyk protect",
+    "prepare": "yarn run snyk-protect"
   },
   "pkg": {
     "scripts": [
@@ -53,5 +56,6 @@
     "assets": [
       ".build/module/**"
     ]
-    }
+  },
+  "snyk": true
 }