title: How to update ReactJS's `create-react-app`?
body: <p>The <a href="https://reactjs.org/docs/create-a-new-react-app.html" rel="noreferrer">ReactJS docs stated</a> we can use</p>
  
  <pre><code>npx create-react-app my-app
  </code></pre>
  
  <p>to create a React app.  But how do we update the <code>create-react-app</code>?  Is there a general rule if it is something started by <code>npx</code>?  I keep on clicking on some links and reached the site <a href="https://create-react-app.dev/" rel="noreferrer">https://create-react-app.dev/</a> and it has a line:</p>
  
  <pre><code>npm install react-scripts@latest
  </code></pre>
  
  <p>but I wonder if I run it, it is not <code>-g</code> (global), so will it let us create a React app in any folder?  Also when I ran it, it gave:</p>
  
  <pre><code>found 6289 vulnerabilities (4974 low, 306 moderate, 1004 high, 5 critical)
  </code></pre>
  
  <p>so there seems to be something that needs to be done extra.</p>