underscore vulnerability

```
underscore  <=1.13.7
Severity: high
Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack - https://github.com/advisories/GHSA-qpx9-hpmf-5gmw
fix available via `npm audit fix --force`
Will install newman@2.1.2, which is a breaking change
node_modules/underscore
  httpntlm  >=1.5.0
  Depends on vulnerable versions of underscore
  node_modules/httpntlm
```