Add vendor to cpa.dependencies