[Snyk] Security upgrade ttf2woff2 from 2.0.3 to 4.0.0

[Bhanditz]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	718/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.5	Uncontrolled Resource Consumption ('Resource Exhaustion') SNYK-JS-TAR-6476909	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: ttf2woff2

The new version differs by 28 commits.

• 1c04892 4.0.0
• b1f4d00 Merge branch 'upgrade-emscripten' of https://github.com/andersk/ttf2woff2 into andersk-upgrade-emscripten2
• 0657e8d chore(dependencies): update dependencies
• 1734cbd Rebuild with Emscripten 2.0.11
• a9666ca travis: Update Node.js versions
• ee55bfd chore(dependencies): update dependencies
• 4d09bb9 Upgrade to node-gyp 6.0
• dc8b77c Merge pull request #54 from mikehaertl/patch-1
• 7ce3002 Fix CLI example
• a47a507 3.0.0
• 58ee92d Merge pull request #36 from tfoxy/master
• 3357787 Merge pull request #51 from pioug/node-12
• 8988a83 Merge pull request #50 from L2jLiga/master
• 16d66b5 Add support for Node.js 12
• 378990c Updated node-gyp to 4.x
• a9893cb Merge pull request #42 from L2jLiga/master
• 0e1bda3 Merge pull request [Snyk] Fix for 9 vulnerable dependencies #1 from L2jLiga/test-branch
• 9c0d30f Breaking change: drop node 0.12 support
• e48b3e8 Changed: use node 4-10 for TRAVIS
• 7aadbe3 Removed: unused import from ttf2woff main file
• 4d45a6a Changed: use Buffer alloc instead of allocUnsafe
• f2b163c Fixed tests
• eb59d48 Merge pull request #41 from L2jLiga/master
• c812cbb Update dependencies

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncontrolled Resource Consumption ('Resource Exhaustion')