draftail has a peer dependency on draft-js version 0.10.5, the latest version of draft-js is at 0.11.7.
draft-js 0.10.5 has some requirements on an earlier version of node-fetch which currently has a high security vulnerability (GHSA-r683-j2x4-v87g) and also size which currently has a low security vulnerability (GHSA-w7rc-rwvf-8q5r)
We've overridden the peer dependencies for draftail to the latest version of draft-js and -everything still seems to be functioning as normal- see comment
It looks like a pull request was started for 0.11.0 when it was in BETA but not completed #186
@zerolab also left a comment here: #186 (comment)