Sorry for not being clear here. `vendor/*` DOES belong in the blacklist, whereas `transcript_test.js` does not.