Move third-party assets to /vendor