Add the CVE for the randomized build directory
Properly handle equality of Link objects with other objects
Alias the "real" names as pip._vendor.* when the vendored are missing
Use a real install instead of develop
Conditionally install the pip._vendor items
Test unvendoring on Travis
Add a warning to the setup.py if used with no bundled
Address Feedback from @ncoghlan
Update the bundling documentations