External JS in Lightning Component
Presently static resource is the only way to use external JS library. It is a security policy.
https://developer.salesforce.com/docs/atlas.en-us.lightning.meta/lightning/apps_csp.htm
Using External JavaScript Libraries
All JavaScript libraries must be uploaded to Salesforce static resources.
Why this is done this way is explained here.