diff --git a/.gitignore b/.gitignore
index d90488a..3affab3 100644
--- a/.gitignore
+++ b/.gitignore
@@ -40,3 +40,6 @@ Thumbs.db
 
 # Optics simulation template
 optics-template/
+
+# CI / local npm audit artifact (must not be linted)
+audit.json
diff --git a/package-lock.json b/package-lock.json
index ac7654b..ab4ce67 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -16,6 +16,7 @@
         "@playwright/test": "^1.61.1",
         "@types/node": "^26.1.1",
         "canvas": "^3.2.3",
+        "fast-uri": "^3.1.4",
         "happy-dom": "^20.11.0",
         "jsdom": "^29.1.1",
         "playwright": "^1.61.1",
@@ -5509,9 +5510,9 @@
       "license": "MIT"
     },
     "node_modules/fast-uri": {
-      "version": "3.1.2",
-      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.2.tgz",
-      "integrity": "sha512-rVjf7ArG3LTk+FS6Yw81V1DLuZl1bRbNrev6Tmd/9RaroeeRRJhAt7jg/6YFxbvAQXUCavSoZhPPj6oOx+5KjQ==",
+      "version": "3.1.4",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.4.tgz",
+      "integrity": "sha512-8JnbkQ4juDyvYs4mgFGQqg4yCYtFDtUtmp2QIQq11ZZe5CFQ5wcqm1rqDgAh/QdMySuBnPzMUiJUNZG5N/AiQw==",
       "dev": true,
       "funding": [
         {
diff --git a/package.json b/package.json
index 35e31ba..d444eab 100644
--- a/package.json
+++ b/package.json
@@ -46,19 +46,19 @@
   },
   "devDependencies": {
     "@biomejs/biome": "^2.5.4",
+    "@playwright/test": "^1.61.1",
     "@types/node": "^26.1.1",
     "canvas": "^3.2.3",
     "happy-dom": "^20.11.0",
     "jsdom": "^29.1.1",
+    "playwright": "^1.61.1",
     "png-to-ico": "^3.0.2",
     "sharp": "^0.35.3",
     "tsx": "^4.23.1",
     "typescript": "^7.0.2",
     "vite": "^8.1.5",
     "vite-plugin-pwa": "^1.3.0",
-    "vitest": "^4.1.10",
-    "@playwright/test": "^1.61.1",
-    "playwright": "^1.61.1"
+    "vitest": "^4.1.10"
   },
   "engines": {
     "node": ">=22.0.0"