vendor dependency