json-refs@v2.1.7 is a security release. json-refs dependencies were updated to fix two reported security issues:
path-loader was using an insecure version of qs
json-refs was using an insecure version of uri-js
All dependencies were updated just to be safe.