fix: web/package.json & web/yarn.lock to reduce vulnerabilities

fix: web/package.json & web/yarn.lock to reduce vulnerabilities #817