We tried to drop an example into our app, but our Snyk flagged several critical and high vulnerabilities. Upon inspection, it seems as though the root cause is due to bootstrapping usiong create-react-app. React themselves recommend against using this method (source) - these examples should be updated to use more modern approaches.