viewer: use a CDN instead of bundling third-party libs