Should add lodash as a dependency

[nGoline]

Lodash is required in ./files/stat.js and ./pin/ls.js but is not referenced in package.json;

This is causing errors when the core project doesn't require lodash.