Won't this put a release cadence and incident response release burden on Finatra?
Providing outdated versions of these is also an unwelcome liability.
I believe canonical way of getting flight and bootstrap nowadays is either with bower or shared distribution centers like cdnjs and others.
Good point. The idea was to ship a bower.json which depended on flight/bootstrap that the user can then run to get the latest versions (perhaps even run it for them if as part of app creation if bower is installed).