Instead of embedding third-party .js files in our source tree (where they are invisible to tools like versioneye and maven-dependency-plugin), we should replace them with references to the corresponding webjars: http://www.webjars.org/
(Found with this:
It should be easy to add new webjars if required.
We could also replace jsf-ajax-viewstate-fix.js with a bit of omnifaces:
In the end, I had to keep the copies of codemirror and jquery-file-upload we have, because the versions we use include some customisations.
The other third-party JS files in zanata-war have been replaced by webjars.