I suspect that the Apache license is meant to only apply to the PDFJS source code, and the "... Evaluation License" applies to the minified/bundled pdfjs express code that's in there (but not actually human readable?). That's my guess.
I think you're right, but how is someone supposed to know which parts go with which? I guess \pdfjs-express-6.2.1\package\public\core\pdfjs is Apache 2.0 and everything else is commercial?