Add JSON as a dev dependency; enforce https.