vendor deps, fix import paths