vendor dependencies at the beginning of buildfile