Improve OpenAPI security with defensive linting rules

Some simple rules to add to your OpenAPI linting setup as a quick way to catch some small but dangerous API mistakes.