A comment above said CRA is unmaintained and there were unfixed vulnerabilities. Is that not the case?
Re:How to start a React Project in 2023
by throw_away1525 on Friday March 24, 2023 @03:28PM
(#35294251)
CRA is no longer recommended. Official recs are Next, Remix, and Gatsby.
Seems you are right. More context here: https://github.com/facebook/create-react-app/issues/13077
Last I checked the "unfixed vulnerabilities" where regex Denial Of Service at build time, see https://github.com/facebook/create-react-app/issues/11174
If you don't have solid experience already: Don't plan your projects with anything except plain React configured with TypeScript. Use "Create React Application" (cra) to set it up and stick with the standards.
Everything else you can add later - if you need it - and in the mean time you have the chance to move faster without breaking things and make better decisions.
If you already have solid experience: consider this anyway if it is just another web application. I personally at least have seen a lot of time wasted because people always deviate from the standards both in React, Angular and Maven.
When time comes to add things we think we need, think about the tokens mentioned in https://boringtechnology.club