We need to have a test case that fails when any dep path is not
vendored. (until we use gx fully that is, and vendor everything
with it)

License: MIT
Signed-off-by: Juan Batiz-Benet <juan@benet.ai>