A npm package/plugin that generate Content Security Policy for create-react-app without eject or rewired.