Codemirror should be considered vendored 

Same as #1742 but with a test for good measure.