Moves dependencies to .vendor