diff --git a/package.json b/package.json
index c6ca0ef..172d4da 100644
--- a/package.json
+++ b/package.json
@@ -75,7 +75,7 @@
     "js-yaml": "^3.4.2",
     "kefir": "^3.7.1",
     "less": "2.6.1",
-    "lodash": "^3.10.1",
+    "lodash": "^4.17.19",
     "md5": "^2.0.0",
     "migroose": "^0.5.0",
     "migroose-cli": "^0.1.0",
diff --git a/yarn.lock b/yarn.lock
index 58d86c3..8625c29 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -649,7 +649,6 @@ chokidar@~0.12.5:
     async-each "~0.1.5"
     readdirp "~1.3.0"
 
-
 circular-json@^0.3.1:
   version "0.3.3"
   resolved "https://registry.yarnpkg.com/circular-json/-/circular-json-0.3.3.tgz#815c99ea84f6809529d2f45791bdf82711352d66"
@@ -3059,17 +3058,17 @@ lodash.toplainobject@^3.0.0:
     lodash._basecopy "^3.0.0"
     lodash.keysin "^3.0.0"
 
-lodash@*, lodash@^3.10.1, lodash@^3.3.1, lodash@^3.9.1:
-  version "3.10.1"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-3.10.1.tgz#5bf45e8e49ba4189e17d482789dfd15bd140b7b6"
+lodash@*, lodash@^4.0.0, lodash@^4.14.0, lodash@^4.17.19:
+  version "4.17.19"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.19.tgz#e48ddedbe30b3321783c5b4301fbd353bc1e4a4b"
 
 lodash@3.6.*:
   version "3.6.0"
   resolved "https://registry.yarnpkg.com/lodash/-/lodash-3.6.0.tgz#5266a8f49dd989be4f9f681b6f2a0c55285d0d9a"
 
-lodash@^4.0.0, lodash@^4.14.0:
-  version "4.17.4"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.4.tgz#78203a4d1c328ae1d86dca6460e369b57f4055ae"
+lodash@^3.10.1, lodash@^3.3.1, lodash@^3.9.1:
+  version "3.10.1"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-3.10.1.tgz#5bf45e8e49ba4189e17d482789dfd15bd140b7b6"
 
 lodash@~0.10.0:
   version "0.10.0"
@@ -3473,7 +3472,7 @@ mute-stream@0.0.5, mute-stream@~0.0.4:
   version "0.0.5"
   resolved "https://registry.yarnpkg.com/mute-stream/-/mute-stream-0.0.5.tgz#8fbfabb0a98a253d3184331f9e8deb7372fac6c0"
 
-nan@^2.0.2, nan@^2.0.5:
+nan@^2.0.5:
   version "2.6.2"
   resolved "https://registry.yarnpkg.com/nan/-/nan-2.6.2.tgz#e4ff34e6c95fdfb5aecc08de6596f43605a7db45"