Use NPM and drop yarn and the yarn lock file

[chalin]

NPM works just fine.
Also, package lock files are an unnecessary overhead for a website.

/assign @chalin

[kzys]

I'm honestly fine using npm instead of yarn. But I'd like to keep package-lock.json for reproducibility and security.