We've agreed to preserve vendoring at the root of the top-level module in a build but we haven't worked out the details. That's this issue.