Remove tarteaucitron.js library from the package

If this requires a manual step to require the library, it should probably be considered a breaking change and done in a major release.

AFAIK the library is included because it's slightly customized for use with Drupal.

So externalizing it using composer might not be a trivial task. Feasible though.

Here is the diff between this upstream version and the version in tacjs.

Looks like the MIT license is GPL-2.0-or-later compatible:
https://www.drupal.org/node/1475972#gplv2-compatible-licenses →
Or am I missing something?

Duplicating third-party assets is strongly discouraged though:
https://www.drupal.org/docs/develop/git/setting-up-git-for-drupal/drupal... →

Ok, fair; see also: https://www.drupal.org/about/licensing#gpl-compatible →

Especially when there are changes.

BTW it might be worth storing the changes as a patch in the repo, to make future update easier.

I am reopening because, even if the license is OK, it is a bad practice to duplicate code like this.

Let's see if we can get the tacjs changes committed upstream: https://github.com/AmauriC/tarteaucitron.js/pull/1136

Looks like the maintainer provided a workaround: https://github.com/AmauriC/tarteaucitron.js/pull/1136#issuecomment-16321...

I'd suggest going that route at least for now. This will help also with security issues reported upstream that might affect this module. Increasing prio because of that.