title: How to fix npm audit fix issues?
body: <pre class="lang-none prettyprint-override"><code>┌───────────────┬──────────────────────────────────────────────────────────────┐
  │ Low           │ Prototype Pollution                                          │
  ├───────────────┼──────────────────────────────────────────────────────────────┤
  │ Package       │ lodash                                                       │
  ├───────────────┼──────────────────────────────────────────────────────────────┤
  │ Patched in    │ &gt;=4.17.5                                                     │
  ├───────────────┼──────────────────────────────────────────────────────────────┤
  │ Dependency of │ react-native-cached-image                                    │
  ├───────────────┼──────────────────────────────────────────────────────────────┤
  │ Path          │ react-native-cached-image &gt; lodash                           │
  ├───────────────┼──────────────────────────────────────────────────────────────┤
  │ More info     │ https://npmjs.com/advisories/577                             │
  └───────────────┴──────────────────────────────────────────────────────────────┘
  found 11 vulnerabilities (2 low, 8 moderate, 1 high) in 26316 scanned packages
    11 vulnerabilities require manual review. See the full report for details.
  </code></pre>
  
  <p>This shows up when I try to <code>npm install</code>, and all of them required manual review. I've tried to visit <a href="https://www.npmjs.com/advisories/577" rel="noreferrer">this</a> to check for more info and apparently it's because my <code>lodash</code> is of version <code>4.17.4</code>. So I've then run <code>npm install --save lodash@4.17.5</code> and checked my <code>package.json</code> to make sure it's reflecting correctly. </p>
  
  <p>However, it seems the vulnerabilities is still there. Wondering if I fix it the wrong way?</p>
  
  <p>As per requested, the body of package.json</p>
  
  <pre><code>"dependencies": {
     "lodash": "^4.17.5",
  }
  </code></pre>