various maintenance edits

tweaked code
stricter dependency versions
cleaned readme
added vendors.yml