lodash.pick.nocve

The lodash method _.pick exported as node.js module but without cve