Bump underscore from 1.9.2 to 1.12.1

Bumps [underscore](https://github.com/jashkenas/underscore) from 1.9.2 to 1.12.1.
- [Release notes](https://github.com/jashkenas/underscore/releases)
- [Commits](jashkenas/underscore@1.9.2...1.12.1)

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

package-lock.json

@@ -74,7 +74,7 @@
     "semver": "^6.3.0",
     "serve-favicon": "^2.5.0",
     "traverse": "^0.6.6",
-    "underscore": "^1.9.1",
+    "underscore": "^1.12.1",
     "unzipper": "^0.10.5",
     "validator": "^11.1.0",
     "winston": "^3.2.1",