Do not allow application name of `vendor`.
Merge pull request #1089 from rjackson/prevent-vendor

Do not allow application name of `vendor`.