FLO-162: Dependency hygiene — drop web-vitals boilerplate, patch yaml advisory

[Fl0p]

Summary

Final cleanup in the modernization chain from FLO-156 — clears the residual stale dependencies left after the CRA removal.

• Remove web-vitals + delete src/reportWebVitals.ts and its import/call in src/index.tsx. It was unused CRA boilerplate on the removed v2 getCLS/getFID API — never wired to any real metrics sink. (If perf metrics are wanted later, that's a separate ticket to add web-vitals@5 with the current onCLS/onINP API.)
• Bump yaml ^2.8.2 → ^2.8.3 (resolves 2.9.0) to clear GHSA-48c2-rrv3-qjmp (moderate: stack overflow via deeply nested collections).
• @types/node was already aligned to ^22 in FLO-158, so no change needed there.

Verification

yarn typecheck      → exit 0
yarn lint           → 0 errors, 6 pre-existing warnings
yarn test           → 4 files, 117 tests passed
yarn build          → ✓ 616ms (web-vitals chunk no longer emitted)
yarn npm audit      → No audit suggestions (advisory cleared)

🤖 Generated with Claude Code

[coderabbitai]

Warning

Review limit reached

@Fl0p, we couldn't start this review because you've used your available PR reviews for now.

Your plan currently allows 1 review/hour. Refill in 48 minutes and 38 seconds.

Your organization has run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After more review capacity refills, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than trial, open-source, and free plans. In all cases, review capacity refills continuously over time.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 58f3fb90-14c8-4cc3-8f3e-e216634971aa

📥 Commits

Reviewing files that changed from the base of the PR and between e05803e and 9d20e42.

⛔ Files ignored due to path filters (1)

• yarn.lock is excluded by !**/yarn.lock, !**/*.lock

📒 Files selected for processing (3)

• package.json
• src/index.tsx
• src/reportWebVitals.ts

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch flo-162-dep-hygiene

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}