and if you really want to limit the vendors, the dev requirements should not be added