An old vulnerable version of "bootstrap" is used in the repo

Hi,
Repo use bootstrap from version 2.3.1 whic his vulnerable to CSS: npmjs.com/advisories/891
If bootstrap package is really in use, it should be upgraded, if not, removed.
Thanks! 