add fromStringStrict, jsvalidate, update deps

Review by @joneshf  etc.