如何在ReactJS中混淆生产代码？

I've recently began to work on ReactJS, while I try to bundle to code in production.. I realized all the codes are in readable format. I'm aware of the approach below: Set false to generate sourcemap.

但是，按照这种方式，我的代码仍然可以读取

1. API端点
2. API密钥

我试图了解在生产中完全混淆我的代码的正确方法是什么？