Self-host d3.js to avoid https issues. Also fix trivial effectless bug.