signing-party 1.1.7, vendor dependencies