OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
Usually tests functionality of Libraries!
static website with react16.