separate deps for bin/bundle and vendor/