vendoring external libraries