Ask HN: Where did the verb “vendoring” come from?

"Vendoring" is the practice of importing static versions of dependencies and building your application against those static dependencies rather than building against something managed and fetched by a dependency management system.

Does anyone know the etymology of the word? I've had zero success connecting any dots on this.

Vendors sell things. Dependencies are things.

... ?