Lodash Pick causes a security issue

[bcgilliom]

It seems the guidance is to no longer use the individual imports (they are basically deprecated) the security issue is fixed in the main package as of 4.17.19, but I think the individual packages (like pick) didn't get repacked on npm?

GHSA-p6mc-m468-83gw

lodash/lodash#5809

[shamas]

Any updates on this? It's kind of annoying because the npm audit --fix installs a very outdated version of this package