adding vendor dependencies and package.json