[Snyk] Security upgrade ttf2woff2 from 2.0.3 to 3.0.0

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	711/1000 Why? Recently disclosed, Has a fix available, CVSS 8.5	Arbitrary File Write SNYK-JS-TAR-1579147	Yes	No Known Exploit
	711/1000 Why? Recently disclosed, Has a fix available, CVSS 8.5	Arbitrary File Write SNYK-JS-TAR-1579152	Yes	No Known Exploit
	711/1000 Why? Recently disclosed, Has a fix available, CVSS 8.5	Arbitrary File Write SNYK-JS-TAR-1579155	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: ttf2woff2

The new version differs by 19 commits.

• a47a507 3.0.0
• 58ee92d Merge pull request #36 from tfoxy/master
• 3357787 Merge pull request #51 from pioug/node-12
• 8988a83 Merge pull request #50 from L2jLiga/master
• 16d66b5 Add support for Node.js 12
• 378990c Updated node-gyp to 4.x
• a9893cb Merge pull request #42 from L2jLiga/master
• 0e1bda3 Merge pull request [Snyk] Fix for 9 vulnerable dependencies #1 from L2jLiga/test-branch
• 9c0d30f Breaking change: drop node 0.12 support
• e48b3e8 Changed: use node 4-10 for TRAVIS
• 7aadbe3 Removed: unused import from ttf2woff main file
• 4d45a6a Changed: use Buffer alloc instead of allocUnsafe
• f2b163c Fixed tests
• eb59d48 Merge pull request #41 from L2jLiga/master
• c812cbb Update dependencies
• a12b81d Build instead of rebuild on install
• 81dcfe7 Merge pull request #34 from perrin4869/patch-1
• a6624f7 Remove preferGlobal option from package.json
• 7defa73 Updating deps + ignore build for npm publications

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic