react-redux VS frontend-bootcamp

I'm using react/react-redux/react-router/react-router-redux.

Reactjs As seen here I am trying to decouple my app's components as much as I can and make them not aware of any storage or action creator. The goal is to have them to manage their own state and call functions to emit a change. I have been told that you do this using props. Considering // Menu.jsximport React from 'react'import { className } from './menu.scss'import Search from 'components/search'class Menu extends React.Component { render () { return ( Home foo bar ) }} And // Search.jsximport React from 'react'import { className } from './search.scss'class Search extends React.Component { render () { let { searchTerm, onSearch } = this.props return ( {searchTerm} onSearch(e.target.value)} value={searchTerm} /> ) }}Search.propTypes = { searchTerm: React.PropTypes.string, onSearch: React.PropTypes.function}export default Search And reading here I see a smart use of Provider and connect and my implementation would look something like this: import { bindActionCreators, connect } from 'redux'import actions from 'actions'function mapStateToProps (state) { return { searchTerm: state.searchTerm }}function mapDispatchToProps (dispatch) { return bindActionCreators({ dispatchSearchAction: actions.search }, dispatch)}export default connect(mapStateToProps, mapDispatchToProps)(Search) Assuming I have a store handling searchTerm as part of the global state. Problem is, where does this code belongs to? If I put it in Search.jsx I will couple actions with the component and more important to redux. Am I supposed to have two different versions of my component, one decoupled and one connect()ed and have to use it? If yes what would my files tree look like? One file per component or a like a make-all-connected.js ? Answer link : https://codehunter.cc/a/reactjs/decoupling-react-components-and-redux-connect

It is in fact a part of react-redux which is used to connects a React component to a Redux store.

4. Frontend Bootcamp

I am going through Microsoft's Frontend Bootcamp and built the project locally on my computer. This is an official project in Microsoft's public repos and without adding anything it has 27 CRITICAL vulnerabilities and 283 vulnerabilities total. WTF? That seems not great. Is this just normal for applications running on the internet in JS? Not to mention 26 packages looking for funding.

Frontend Bootcamp GitHub Repo: GitHub - microsoft/frontend-bootcamp: Frontend Workshop from HTML/CSS/JS to TypeScript/React/Redux