diff --git a/.github/workflows/frontend-ci.yml b/.github/workflows/frontend-ci.yml
index f99aa5b40..50e6b6900 100644
--- a/.github/workflows/frontend-ci.yml
+++ b/.github/workflows/frontend-ci.yml
@@ -107,8 +107,12 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v4
 
+      # Audit PRODUCTION dependencies only, matching the Security Scan gate in
+      # deploy.yml. Dev-only tooling (vite, picomatch, eslint) never ships to
+      # users, and its advisories are frequently only fixable via breaking major
+      # bumps — gating CI on them just blocks every unrelated PR.
       - name: Run npm audit
-        run: npm audit --audit-level=high
+        run: npm audit --omit=dev --audit-level=high
 
       - name: Run Snyk security scan
         uses: snyk/actions/node@master
diff --git a/frontend/client/src/pages/home.tsx b/frontend/client/src/pages/home.tsx
index f81a0454f..aefecf339 100644
--- a/frontend/client/src/pages/home.tsx
+++ b/frontend/client/src/pages/home.tsx
@@ -7,7 +7,7 @@ import { KineticText } from "@/components/motion/kinetic-text";
 import { Footer } from "@/components/footer";
 import { Button } from "@/components/ui/button";
 import { Link } from "wouter";
-import { Terminal, Shield, Cpu, Zap, Activity, Code } from "lucide-react";
+import { Terminal, Shield, Cpu, Zap, Code } from "lucide-react";
 import { useQuery } from "@tanstack/react-query";
 import { SEO } from "@/components/seo";
 import type { ApiStats } from "@/lib/api-types";