no need of vendor deps in repository