forgot to add distributions.vendor package to setup.py

tests don't catch this because they run from the source tree