Library uses json.NewDecoder(r).Decode which might not error on trailing extra data

[mitar]

json.NewDecoder(r).Decode by itself is meant as a streaming parser and it does not fail on its own if there is trailing data after payload. I use such check in my own code to mitigate that.

See: golang/go#36225