move vendors to deps