move some dependencies from dev env into vendor