FWIW, <a href="https:&#x2F;&#x2F;github.com&#x2F;facebook&#x2F;react&#x2F;blob&#x2F;master&#x2F;package.json" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;facebook&#x2F;react&#x2F;blob&#x2F;master&#x2F;package.json</a> is not actually the package.json we ship to npm. This is just for building. <a href="https:&#x2F;&#x2F;github.com&#x2F;facebook&#x2F;react&#x2F;blob&#x2F;master&#x2F;packages&#x2F;react&#x2F;package.json" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;facebook&#x2F;react&#x2F;blob&#x2F;master&#x2F;packages&#x2F;react...</a> is the package.json we ship to npm.