add vendor to dependencies