vendor/* auth.json app/*