Add jsonapi_extras module to GovCMS

[tv2530]

** What value does this module/package add to GovCMS?
Disable unwanted endpoints created by JSON:API module which is included in GovCMS

** Please provide a brief outline of what this module does.
JSON:API Extras provides a means to override and provide limited configurations to the default zero-configuration implementation provided by the JSON:API in Core.

** Who does this module benefit:
[ ] end users
[ ] content editors
[ ] site builders
[ ] themers
[X] developers

** How could you provide/replicate the functionality of this module using alternative methods, eg in your theme?
Not possible to replicate using other methods as per ticket #12231

** If this module styles or alters HTML or JavaScript output, can the functionality be provided via the theme? What alternatives have you considered.
Not possible to replicate using other methods as per ticket #12231

** What is the maintenance and support status of the module. Describe the issue queue activity.
Unknown. Last release 15 December 2021. 25 Open bugs. Changes week to week

** What permissions are needed to utilise the module (and are any new permissions provided by the module)?
Unknown.

** Does the module modify the database structure and/or store additional metadata on nodes or other entities? If so, why? What are the risks for future updates?
Unknown.

** Is the module designed to capture anonymous user data?
Unknown. I do not expect it to.

** Is the output of the module typically fully cacheable? Would the inclusion of this module potentially render pages uncacheable.
Unknown.

** What is your assessment of the quality of this module, the contribution history of the module's maintainers, and the uptake of the module within the Drupal community?
10.597 sites report using this module. Supported by some large organisations. In use by some state government websites. Stable release covered by security advisory policy.

** Additional information
https://www.drupal.org/project/jsonapi_extras

[thisisalistairsaccount]

Hi @tv2530 we are looking at a controlled implementation around JSON API for SaaS sites. This module potentially forms part of our approach and we are looking at a mix of options as part of a proof of concept.

I don't currently have a timeframe associated with this but we are looking at internally.

[brett-sargeant]

How did the investigation into this go?