As I understood from documentation setting up Grunt requires access to the webpack, which from my understanding is hidden when project is using create-react-app and we do not eject out of it. Is it possible to set up Grunt library for such project somehow?

In case if it matters, I think I need Grunt in order to set up a plugin for Retire.js library in order to check libraries for known vulnerabilities and I would like this process to be as automated as it is possible.