Vendoring is often considered an anti-pattern, for many reasons including the following
- extra source code space
- hard to track upstream changes
- loss of version control information.
But sometimes one has to counter an anti-pattern with a relatively safer anti-pattern.