Add D3.js to the vendored list

Followed the commit pattern from
a3e1420476c8dec309895e6bbde01a2101d0e1ed