[Snyk] Security upgrade react-scripts from 1.0.10 to 5.0.0

[maniator]

Snyk has created this PR to fix 4 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Improper Handling of Unicode Encoding SNYK-JS-TAR-15038581	713
	Regular Expression Denial of Service (ReDoS) SNYK-JS-DIFF-14917201	708
	Use of a Cryptographic Primitive with a Risky Implementation SNYK-JS-ELLIPTIC-14908844	708
	Directory Traversal SNYK-JS-TAR-15032660	693

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Directory Traversal

[Copilot]

Pull request overview

Upgrades react-scripts to address Snyk-reported vulnerabilities in the dependency tree.

Changes:

• Bumps react-scripts from 1.0.10 to 5.0.0 in package.json.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

react-scripts@5 is not compatible with the current React 15.x dependency set. With react/react-dom pinned to ^15.6.1, installs/builds are expected to fail due to peer dependency/runtime incompatibilities. Either upgrade react/react-dom (and any related code) to a supported version for CRA 5, or keep react-scripts on a version compatible with React 15 and address the transitive vulnerabilities via overrides/resolutions instead.

Suggested change

	"react-scripts": "5.0.0",
	"serve": "^6.0.3",
	"styled-components": "^2.1.1"
	"react-scripts": "0.9.5",
	"serve": "^6.0.3",
	"styled-components": "^2.1.1"

[Copilot]

Upgrading from react-scripts@1 to 5 also raises the minimum supported Node.js version (CRA 5 requires a modern Node runtime). Since this repo doesn't declare an engines.node range, deployments/builds (e.g., Heroku) can break depending on the default Node version. Consider adding an explicit engines field aligned with the required Node version for the chosen react-scripts.