pdf.js is available on npm. Importing the dependency from there instead
of vendoring it has certain benefits, e.g. the discoverability of
updates (especially security fixes).