what needs to stay in the vendor directory?