vendored repos