#1 Fix vendor exclude via whitelist