remove vendor from dependencies