d2js: get rid of `eval`

[alixander]

Eval is used for running bits of JS, like a sketch.js call. These are all trusted inputs, but could cause the lib to not be runnable in certain environments. If this is a problem for people, this issue will get prioritized