"Vendor" wasn't actually a verb at all, at least until this usage.

And it doesn't in any way describe the activity of bundling open source libraries that are not even supplied from vendors for the most part! So a poor neologism, in my opinion.