Use dependencies list to rewrite vendored packages