dead-deps — what happened to your dependencies

Is create-react-app still maintained?

No — create-react-app stopped being maintained around February 2025. create-react-app's own maintainers named vite as the successor.

Status
No longer maintained
Last maintained
February 2025
Use instead
vite on npm
Succession
Successor named by the maintainers
Drop-in
no — expect code changes
Confidence
medium

What should I use instead of create-react-app?

create-react-app's own maintainers named vite as the successor. vite is not a drop-in replacement, so expect to change call sites.

How to migrate from create-react-app to vite

For a plain SPA: move public/index.html to the project root and rewrite its %PUBLIC_URL% placeholders, replace react-scripts with vite and @vitejs/plugin-react, and rename REACT_APP_ environment variables to VITE_.

Why create-react-app is on this list

The React team deprecated Create React App for new apps in February 2025; the post states CRA has no active maintainers, and the 5.1.0 release published at the same time prints a deprecation warning on install. React's own guidance points new projects at a framework such as Next.js, React Router or Expo first, and names Vite, Parcel and Rsbuild for people who want to roll their own setup. Vite is the usual destination for a plain single-page app, but a framework is the team's primary recommendation, so treat to as situational.

The succession is well supported, but it is not the only defensible choice.

create-react-app alternatives

Beyond the primary recommendation, these are credible for create-react-app's use case:

Check your own project for create-react-app

npx dead-deps --all --min-state unmaintained

Run that in the directory holding your lockfile. If create-react-app is anywhere in your tree — a direct dependency or buried under something else — it appears in the report with this verdict, this successor and the same evidence links, alongside anything else that has stopped moving. Nothing is uploaded; the scan reads your lockfile locally and queries public registry metadata.

Exit code 1 means something was flagged, which makes npx dead-deps --min-state deprecated usable as a CI gate. See how verdicts are produced.

Evidence

Every claim on this page traces to a primary source. Check them:

See the full index of covered packages, or read the methodology for how a verdict is reached and why a quiet package is not a dead one.