chore: address copilot review feedback

- Update web-vitals mock and tests to include FCP/TTFB
- Annotate audit reports with post-fix status note

Author: MarkusNeusinger

agentic/audits/2026-04-27-all.md

@@ -13,6 +13,8 @@
 ## Summary
 The anyplot repository exhibits high technical excellence in its frontend and core AI generation workflows but suffers from critical infrastructure and baseline safety issues. The use of experimental Python 3.14, a major command injection vulnerability in CI/CD, and broken Python syntax in automation scripts significantly compromise production readiness.
 
+**Note:** Several critical and high-severity findings listed below (Python syntax errors, invalid model name, documentation drift, and missing Web Vitals) were addressed in PR #5506.
+
 ## Quick Wins (Importance ≥4 & Effort=S)
 | # | Finding | Auto-fix | Files | Hint |
 |---|---------|----------|-------|------|

agentic/audits/latest.md

@@ -13,6 +13,8 @@
 ## Summary
 The anyplot repository exhibits high technical excellence in its frontend and core AI generation workflows but suffers from critical infrastructure and baseline safety issues. The use of experimental Python 3.14, a major command injection vulnerability in CI/CD, and broken Python syntax in automation scripts significantly compromise production readiness.
 
+**Note:** Several critical and high-severity findings listed below (Python syntax errors, invalid model name, documentation drift, and missing Web Vitals) were addressed in PR #5506.
+
 ## Quick Wins (Importance ≥4 & Effort=S)
 | # | Finding | Auto-fix | Files | Hint |
 |---|---------|----------|-------|------|

app/src/analytics/reportWebVitals.test.ts

@@ -8,6 +8,8 @@ vi.mock('web-vitals', () => ({
   onLCP: (cb: (m: { value: number; rating: string }) => void) => cb({ value: 2500, rating: 'good' }),
   onCLS: (cb: (m: { value: number; rating: string }) => void) => cb({ value: 0.15, rating: 'needs-improvement' }),
   onINP: (cb: (m: { value: number; rating: string }) => void) => cb({ value: 200, rating: 'good' }),
+  onFCP: (cb: (m: { value: number; rating: string }) => void) => cb({ value: 1200, rating: 'good' }),
+  onTTFB: (cb: (m: { value: number; rating: string }) => void) => cb({ value: 400, rating: 'good' }),
 }));
 
 describe('reportWebVitals', () => {
@@ -66,6 +68,12 @@ describe('reportWebVitals', () => {
     expect(window.plausible).toHaveBeenCalledWith('INP', {
       props: { value: '200', rating: 'good' },
     });
+    expect(window.plausible).toHaveBeenCalledWith('FCP', {
+      props: { value: '1200', rating: 'good' },
+    });
+    expect(window.plausible).toHaveBeenCalledWith('TTFB', {
+      props: { value: '400', rating: 'good' },
+    });
   });
 
   it('merges ambient analytics props (e.g. theme) into CWV events', async () => {
@@ -89,5 +97,11 @@ describe('reportWebVitals', () => {
     expect(window.plausible).toHaveBeenCalledWith('INP', {
       props: { theme: 'dark', value: '200', rating: 'good' },
     });
+    expect(window.plausible).toHaveBeenCalledWith('FCP', {
+      props: { theme: 'dark', value: '1200', rating: 'good' },
+    });
+    expect(window.plausible).toHaveBeenCalledWith('TTFB', {
+      props: { theme: 'dark', value: '400', rating: 'good' },
+    });
   });
 });