introduce VENDORPATH to allow overriding the location of the composer vendor folder