vendorize waf