DEV Community

Discussion on: Don't use create-react-app: How you can set up your own reactjs boilerplate.

 
nikhilkumaran profile image
Nikhil Kumaran S

Like I said before, some devs like myself would like to have control over the configs.

Thread Thread
 
c0dezer019 profile image
Brian Blankenship

Another disadvantage is, you're forced to use whatever dependencies CRA requires, including an older version of webpack and babel-loader. CRA is an entire version behind the current webpack version. Installing a newer version will simply break react-scripts.

Thread Thread
 
bstivers profile image
Brandon Stivers

I'm gonna be blunt and straight to the point.

Go ahead. Use CRA. Then start running things like npm audit. Then try to upgrade individual things without breaking changes. Then be met with a slew of "I CAN'T FORCE UPDATE" messages from npm audit fix --force because everything is bundled together and you're at the mercy of Facebook dev team. The VERY reason why I am here now. IDK about you, but I don't want to be in front of congress (like Zuckerberg) because of vulnerabilities Facebook (or is it meta now?) baked into their "easy button." I may be new to JS and React. But I'm not lazy.

P.S. Ever look at the GitHub issues for CRA? Go ahead. look.