[Snyk] Fix for 1 vulnerabilities

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
Adding or updating a Snyk policy (.snyk) file; this file is required in order to apply Snyk vulnerability patches. Find out more.

Vulnerabilities that will be fixed

With a Snyk patch:

Severity	Issue	Exploit Maturity
	Prototype Pollution SNYK-JS-LODASH-567746	Proof of Concept

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

Travis tests have failed

Hey @snyk-bot, Please read the following log in order to understand the failure reason. It'll be awesome if you fix what's wrong and commit the changes.

Node.js: 9

View build log

npm test

``` > chimee-player@1.4.9 test /home/travis/build/Chimeejs/chimee-player > jest --coverage FAIL __tests__/src/index.js ● Test suite failed to run Cannot use the decorators and decorators-legacy plugin together at validatePlugins (node_modules/@babel/parser/src/plugin-utils.js:47:13) at getParser (node_modules/@babel/parser/src/index.js:75:5) at parse (node_modules/@babel/parser/src/index.js:58:12) at parser (node_modules/@babel/core/lib/parser/index.js:54:34) at parser.next () at normalizeFile (node_modules/@babel/core/lib/transformation/normalize-file.js:93:38) at normalizeFile.next () at run (node_modules/@babel/core/lib/transformation/index.js:31:50) at run.next () at Function.transform (node_modules/@babel/core/lib/transform.js:27:41) ----------|----------|----------|----------|----------|-------------------| File | % Stmts | % Branch | % Funcs | % Lines | Uncovered Line #s | ----------|----------|----------|----------|----------|-------------------| All files | Unknown | Unknown | Unknown | Unknown | | ----------|----------|----------|----------|----------|-------------------| Handlebars: Access has been denied to resolve the property "statements" because it is not an "own property" of its parent. You can add a runtime option to disable the check or this warning: See https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access for details Handlebars: Access has been denied to resolve the property "branches" because it is not an "own property" of its parent. You can add a runtime option to disable the check or this warning: See https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access for details Handlebars: Access has been denied to resolve the property "functions" because it is not an "own property" of its parent. You can add a runtime option to disable the check or this warning: See https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access for details Handlebars: Access has been denied to resolve the property "lines" because it is not an "own property" of its parent. You can add a runtime option to disable the check or this warning: See https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access for details Test Suites: 1 failed, 1 total Tests: 0 total Snapshots: 0 total Time: 1.512s Ran all test suites. npm ERR! Test failed. See above for more details. ```

Chimeejs / chimee-player