The site still fails Lighthouse, including the test for "Includes front-end JavaScript libraries with known security vulnerabilities." But wait, I thought it was just HTML and CSS!
No it doesn't. Are you sure something on your system isn't injecting JavaScript (browser extension?)