Fill in vendor and maintainer information if available
Let dependency discovery bubble back up to allow proper depends in package creation