They do have a lot of PRs merged, and on their npm page I see many canary versions though: https://www.npmjs.com/package/react?activeTab=versions
Maybe someone could enlighten what's happening