Hacker News new | ask | show | jobs
by unmole 1180 days ago
A comment above said CRA is unmaintained and there were unfixed vulnerabilities. Is that not the case?
2 comments
thr717272 1176 days ago
Last I checked the "unfixed vulnerabilities" where regex Denial Of Service at build time, see https://github.com/facebook/create-react-app/issues/11174
link
throw_away1525 1180 days ago
CRA is no longer recommended. Official recs are Next, Remix, and Gatsby.

https://react.dev/learn/start-a-new-react-project

link
thr717272 1176 days ago
Seems you are right. More context here: https://github.com/facebook/create-react-app/issues/13077
link