Vendoring npm into slug