Vendoring packages