Update bundalo for security issue

[jeremycohensolal]

Hello

actually npm audit gives this

This is because in the package.json you use bundalo 0.2.9 which is dependent of a lodash vesion which is unsafe.

Could you at least upgrade to 1.0.0 since lodash seems to has been removed from this version.

Actually applications using makara (or krakenjs) are flagged insecure by npm audit...