use `secure-json-parse` for remotely defined json schemas

[acao]

we might want to utilize this to prevent users from accidentally loading a provided malicious URL that could provide an XSS attack surface!

https://www.npmjs.com/package/secure-json-parse