Switch to @mitre/jsonix

[mike-marcacci]

Tragically, Alexey (highsource) has passed away and his jsonix package is unlikely to receive any future updates.

The @mitre/jsonix fork appears to be a well-maintained and updated. We're going to switch to that.

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ❌ 1 package(s) with incompatible licenses
• ❌ 1 package(s) with invalid SPDX license definitions
• ⚠️ 1 package(s) with unknown licenses.
• ⚠️ 8 packages with OpenSSF Scorecard issues.

View full job summary

[mike-marcacci]

Both flagged dependencies have compatible licenses:

• amdefine is "NOASSERTION AND MIT" but not detected as MIT via automation
• argparse is "Python-2.0" which is compatible with our standards for permissive licenses, and should be added to our allowlist

[sonarcloud]

Quality Gate passed

Issues
32 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

[nickcarenza]

The differences in the mappings come down to explicit enum options now being defined. The seemingly large diffs are due to a difference in ordering of elements.