Vendoring 3rd-party libs