vendor *.lock *.zip