Hidden character in package.json triggers high risk trojan warning on `socket.dev`

[ssc-hrep3]

There is a hidden character in the package.json of the currently released package (v.1.3.5). This triggers a high risk trojan warning on socket.dev: https://socket.dev/npm/package/http2-client/issues/1.3.5