Is create-react-app safe to use?

create-react-app has no known vulnerabilities on the latest version (5.1.0). DepScope rates its health at 65/100 (moderate risk).

What is the latest version of create-react-app?

The latest version of create-react-app is 5.1.0, released 2025-02-15.

Does create-react-app have known vulnerabilities?

No known vulnerabilities on the latest version of create-react-app.

Is create-react-app deprecated?

No, create-react-app is actively maintained. Latest release: 5.1.0 (2025-02-15).

What are alternatives to create-react-app?

Popular alternatives to create-react-app in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does create-react-app use?

create-react-app is licensed under MIT.

create-react-app

npmv5.1.0

Create React apps with no build configuration.

License MITpermissive105 versions6 maintainers11 deps82,082 weekly dl

facebook/create-react-app

/ 100

Health

use with caution

[email protected] low health (65/100) — consider alternatives

Moderate health score (65/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

10/20

popularity

25/25

security

15/15

maturity

15/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (11)

tmp chalk semver envinfo prompts fs-extra tar-pack commander hyperquest cross-spawn validate-npm-package-name

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/create-react-app

create-react-app

npmv5.1.0

Create React apps with no build configuration.

License MITpermissive105 versions6 maintainers11 deps82,082 weekly dl

facebook/create-react-app

/ 100

Health

use with caution

[email protected] low health (65/100) — consider alternatives

Moderate health score (65/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

10/20

popularity

25/25

security

15/15

maturity

15/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (11)

tmp chalk semver envinfo prompts fs-extra tar-pack commander hyperquest cross-spawn validate-npm-package-name

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/create-react-app